systeminformation
5.33.18 · 28 Oct 2026MIT21.4M / weekRepositoryHomepagenpmAtom feed
Upgrading systeminformation from 5.33.3 to 5.33.4
1 release in betweenevery note read
- 0
- changes to make
- 0
- advisories fixed
- 0
- new
- 1
- fix
Security
3 advisories still affect 5.33.4
- systeminformation vulnerable to Windows command injection in services() through Unicode quotation markshigh · GHSA-3f7j-7jwc-fxfj
- systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/netlow · GHSA-4vjg-vx72-qq4g
- systeminformation has prototype pollution in `networkStats()` via the interface namemoderate · GHSA-7648-jmwf-vw7j
Upgrading to 5.33.16 clears them.
Release by release
- fixed
Windows may return corrupted disk serial number value
- fixed