systeminformation
5.33.18 · 28 Oct 2026MIT21.4M / weekRepositoryHomepagenpmAtom feed
Upgrading systeminformation from 5.31.6 to 5.33.18
31 releases in betweennotes for 2
Other targets from 5.31.6Clears its 4 advisories5.33.16
- ?
- changes to make
- 4
- advisories fixed
- ?
- new
- 1+
- fix
Counted from 2 of 31 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 4 advisories affecting 5.31.6
- systeminformation vulnerable to Windows command injection in services() through Unicode quotation markshigh · GHSA-3f7j-7jwc-fxfj
- systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/netlow · GHSA-4vjg-vx72-qq4g
- systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linuxhigh · GHSA-5xpp-75jx-m839
- systeminformation has prototype pollution in `networkStats()` via the interface namemoderate · GHSA-7648-jmwf-vw7j
Release by release
5.33.5 – 5.33.1814 releases, no release note
- fixed
Windows may return corrupted disk serial number value
- fixed
5.31.7 – 5.33.316 releases, nothing new or fixed; 15 without a note
1 other line we could not sort, mostly version bumps
- 5.33.0
dockerContainers() added status, e.g. healthy