CVE-2020-26245

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

CVE-2020-26245

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

CVE-2020-26245

The CVE concerns the npm package systeminformation (prior to v4.30.5). A Prototype Pollution flaw can lead to Command Injection, with fixes implemented by rewriting shell sanitations to prevent pollution. Affected versions are before 4.30.5; remediation is to upgrade to v4.30.5 (or at least v4.30...

@azteam/monitor (>=1.0.1 <=1.0.9), @bb-cli/e2e-bb-test (>=2.8.3-5 <=2.8.4) +217 more potentially affected by CVE-2020-26245 via systeminformation (>=3.30.6 <=4.30.11)

systeminformation NPM version =3.30.6, =1.0.1, =2.8.3-5, =1.0.7, =1.0.0, =1.0.148 and more Source cves: CVE-2020-26245 Source advisory: OSV:GHSA-4V2W-H9JM-MQJG...

@azteam/monitor (>=1.0.1 <=1.0.9), @best/builder (=4.0.0-beta10) +24 more potentially affected by CVE-2020-26245 +1 more via systeminformation (>=4.0.10 <=4.30.11)

systeminformation NPM version =4.0.10, =1.0.1, =0.0.3, =1.1.0, =1.2.3 - @hnordt/sysinfo =0.1.1 and more Source cves: CVE-2020-26245, CVE-2020-7778 Source advisory: SNYK:JS-SYSTEMINFORMATION-1043753...