Lucene search
+L

1 matches found

OSV
OSV
added 2020/11/27 8:15 p.m.9 views

DEBIAN-CVE-2020-26245

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or...

9.8CVSS7.3AI score0.01949EPSS
SaveExploits0References1
Rows per page
Query Builder