systeminformation
5.33.18 · 28 Oct 2026MIT21.4M / weekRepositoryHomepagenpmAtom feed
Upgrading systeminformation from 3.54.0 to 5.33.18
584 releases in betweennotes for 2
Other targets from 3.54.0Clears its 15 advisories5.33.16
5.0.0, 4.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
- ?
- changes to make
- 15
- advisories fixed
- ?
- new
- 1+
- fix
Counted from 2 of 584 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 15 advisories affecting 3.54.0
- OS Command Injection in systeminformationhigh · GHSA-8j36-q8x7-pm6q
- Command Injection in systeminformationmoderate · GHSA-fj59-f6c3-3vw4
- systeminformation command injection vulnerabilityhigh · GHSA-94xh-2fmc-xf5j
- Command Injection Vulnerability in systeminformationhigh · GHSA-jff2-qjw8-5476
- Command Injection Vulnerability in systeminformationmoderate · GHSA-m57p-p67h-mq74
- systeminformation has a Command Injection vulnerability in fsSize() function on Windowshigh · GHSA-wphj-fx3q-84ch
- Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry pathhigh · GHSA-9c88-49p5-5ggf
- Command Injection Vulnerabilityhigh · GHSA-2m8v-572m-ff2v
- Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID)high · GHSA-cvv5-9h9w-qp2m
- systeminformation vulnerable to Windows command injection in services() through Unicode quotation markshigh · GHSA-3f7j-7jwc-fxfj
- Prototype Pollution in systeminformationmoderate · GHSA-4v2w-h9jm-mqjg
- systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/netlow · GHSA-4vjg-vx72-qq4g
- Command Injection via Unsanitized `locate` Output in `versions()` — systeminformationhigh · GHSA-5vv4-hvf7-2h46
- systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linuxhigh · GHSA-5xpp-75jx-m839
- systeminformation has prototype pollution in `networkStats()` via the interface namemoderate · GHSA-7648-jmwf-vw7j
Release by release
5.33.5 – 5.33.1814 releases, no release note
- fixed
Windows may return corrupted disk serial number value
- fixed
4.0.0 – 5.33.3569 releases, nothing new or fixed; 568 without a note
1 other line we could not sort, mostly version bumps
- 5.33.0
dockerContainers() added status, e.g. healthy