Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-26274
6.4
MEDIUMCVSS v3
Published
December 16, 2020
CVSS v2
7.5 HIGH
Affected
3 projects
Assigned by
GitHub
Severity scale
010
Description
In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix.
@types/systeminformation
NPMStub TypeScript definitions entry for systeminformation, which provides its own types definitions
NPMStub TypeScript definitions entry for systeminformation, which provides its own types definitions< 4.31.1NVD
GitHub