CVE-2020-26300

2021-09-0901:15:06

Google

osv.dev

7.2 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.3%

JSON

systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation before version 4.26.2 there is a command injection vulnerability. Problem was fixed in version 4.26.2 with a shell string sanitation fix.

CPENameOperatorVersion
systeminformationeq3.42.7
systeminformationeq4.14.9
systeminformationeq4.0.15
systeminformationeq3.48.2
systeminformationeq3.49.0
systeminformationeq3.42.5
systeminformationeq4.17.2
systeminformationeq4.18.3
systeminformationeq4.23.4
systeminformationeq4.19.1

Name	Operator	Version
systeminformation	eq	3.42.7
systeminformation	eq	4.14.9
systeminformation	eq	4.0.15
systeminformation	eq	3.48.2
systeminformation	eq	3.49.0
systeminformation	eq	3.42.5
systeminformation	eq	4.17.2
systeminformation	eq	4.18.3
systeminformation	eq	4.23.4
systeminformation	eq	4.19.1