systeminformation
5.33.18 · 28 Oct 2026MIT21.4M / weekRepositoryHomepagenpmAtom feed
Your version
5.33.18 is the newest release of 5.x.
In short
1 fixed
Security
3 advisories affect 5.33.4; 5.33.16 fixes them
- Highsysteminformation vulnerable to Windows command injection in services() through Unicode quotation marksGHSA-3f7j-7jwc-fxfj · 28 Oct 2026Fixed in 5.33.16
- Moderatesysteminformation has prototype pollution in `networkStats()` via the interface nameGHSA-7648-jmwf-vw7j · 28 Oct 2026Fixed in 5.33.13
- Lowsysteminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/netGHSA-4vjg-vx72-qq4g · 28 Oct 2026Fixed in 5.33.14
Release note
What's Changed
Windows may return corrupted disk serial number value