CVE-2021-21388

CVE-2021-21388 affects the systeminformation Node.js package (pre-5.6.4). It describes a command-injection flaw in how service parameters are handled (si.inetLatency, si.inetChecksite, si.services, si.processLoad, etc.). The root cause is insufficient validation of input parameters; upgrading to ...

CVE-2021-21388 Command Injection Vulnerability in systeminformation

systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of systeminformation prior to 5.6.4. The issue has been fixed with a parameter check on user input. Please upgrade to version = 5.6.4. If you cannot...

4runr-os (>=1.0.48 <=2.10.77), 7key-gen (>=1.0.12 <=1.1.0) +2898 more potentially affected by CVE-2021-21388 via systeminformation (>=3.30.6 <=5.6.3)

systeminformation NPM version =3.30.6, =1.0.48, =1.0.12, =1.1.9, =1.7.0-beta.7, =3.11.1, =1.0.0, =1.2.0, =0.1.2, =1.16.13, =1.3.16, =1.1.12, =1.6.23, =1.17.13-beta-20260512-042419-7b556a38 and more Source cves: CVE-2021-21388 Source advisory: OSV:GHSA-JFF2-QJW8-5476...