systeminformation
5.33.18 · 28 Oct 2026MIT21.4M / weekRepositoryHomepagenpmAtom feed
Upgrading systeminformation from 5.30.8 to 5.31.0
1 release in betweennotes for 0
- ?
- changes to make
- 1
- advisory fixed
- ?
- new
- ?
- fixes
Counted from 0 of 1 release notes. Advisories are counted from the advisory database, in full.
Security
5 advisories still affect 5.31.0
- Systeminformation vulnerable to Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile namehigh · GHSA-hvx9-hwr7-wjj9
- systeminformation vulnerable to Windows command injection in services() through Unicode quotation markshigh · GHSA-3f7j-7jwc-fxfj
- systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/netlow · GHSA-4vjg-vx72-qq4g
Upgrading to 5.33.16 clears them.
Fixes 1 advisory affecting 5.30.8
- Command Injection via Unsanitized `locate` Output in `versions()` — systeminformationhigh · GHSA-5vv4-hvf7-2h46