Lucene search
+L

10 matches found

OSV
OSV
added 2026/02/19 7:48 p.m.8 views

CVE-2026-26318 systeminformation has Command Injection via Unsanitized `locate` Output in `versions()`

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized locate output in versions. Version 5.31.0 fixes the issue...

8.8CVSS5.6AI score
SaveExploits0References7
Rows per page
Query Builder