systeminformation
5.33.18 · 28 Oct 2026MIT21.4M / weekRepositoryHomepagenpmAtom feed
Upgrading systeminformation from 2.0.5 to 5.33.18
761 releases in betweennotes for 2
Other targets from 2.0.5Clears its 15 advisories5.33.16
5.0.0, 4.0.0, 3.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
- ?
- changes to make
- 15
- advisories fixed
- ?
- new
- 1+
- fix
Counted from 2 of 761 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 15 advisories affecting 2.0.5
- OS Command Injection in systeminformationhigh · GHSA-8j36-q8x7-pm6q
- Command Injection in systeminformationmoderate · GHSA-fj59-f6c3-3vw4
- systeminformation command injection vulnerabilityhigh · GHSA-94xh-2fmc-xf5j
- Command Injection Vulnerability in systeminformationhigh · GHSA-jff2-qjw8-5476
- Command Injection Vulnerability in systeminformationmoderate · GHSA-m57p-p67h-mq74
- systeminformation has a Command Injection vulnerability in fsSize() function on Windowshigh · GHSA-wphj-fx3q-84ch
- Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry pathhigh · GHSA-9c88-49p5-5ggf
- Command Injection Vulnerabilityhigh · GHSA-2m8v-572m-ff2v
- Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID)high · GHSA-cvv5-9h9w-qp2m
- systeminformation vulnerable to Windows command injection in services() through Unicode quotation markshigh · GHSA-3f7j-7jwc-fxfj
- Prototype Pollution in systeminformationmoderate · GHSA-4v2w-h9jm-mqjg
- systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/netlow · GHSA-4vjg-vx72-qq4g
- Command Injection via Unsanitized `locate` Output in `versions()` — systeminformationhigh · GHSA-5vv4-hvf7-2h46
- systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linuxhigh · GHSA-5xpp-75jx-m839
- systeminformation has prototype pollution in `networkStats()` via the interface namemoderate · GHSA-7648-jmwf-vw7j
Release by release
5.33.5 – 5.33.1814 releases, no release note
- fixed
Windows may return corrupted disk serial number value
- fixed
3.0.0 – 5.33.3746 releases, nothing new or fixed; 745 without a note
1 other line we could not sort, mostly version bumps
- 5.33.0
dockerContainers() added status, e.g. healthy