CVE-2021-21388 Command Injection Vulnerability in systeminformation

systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of systeminformation prior to 5.6.4. The issue has been fixed with a parameter check on user input. Please upgrade to version = 5.6.4. If you cannot...

CVE-2021-21388

CVE-2021-21388 affects the systeminformation Node.js package (pre-5.6.4). It describes a command-injection flaw in how service parameters are handled (si.inetLatency, si.inetChecksite, si.services, si.processLoad, etc.). The root cause is insufficient validation of input parameters; upgrading to ...

@finsemble/finsemble-electron-adapter (>=5.4.0, <=5.4.8), @hydrooj/hydrojudge (>=2.3.11, <=2.4.13) +5 more potentially affected by CVE-2021-21388 via systeminformation (>=5.0.6, <=5.6.3)

systeminformation NPM version =5.0.6, =5.4.0, =2.3.11, =1.15.3, =1.16.0, =9.14.2, =2.18.0, =9.14.2, =9.15.5 Source cves: CVE-2021-21388 Source advisory: OSV:GHSA-JFF2-QJW8-5476...