Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-7752
8.8
HIGHCVSS v3
Severity scale
010
Description
This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to overwrite Javascript files and then execute any OS commands.
@types/systeminformation
NPMStub TypeScript definitions entry for systeminformation, which provides its own types definitions
NPMStub TypeScript definitions entry for systeminformation, which provides its own types definitions< 4.27.11NVD
GitHub