Lucene search
+L

10 matches found

Cvelist
Cvelist
added 2026/02/19 7:48 p.m.30 views

CVE-2026-26318 systeminformation has Command Injection via Unsanitized `locate` Output in `versions()`

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized locate output in versions. Version 5.31.0 fixes the issue...

8.8CVSS0.0115EPSS
SaveExploits1References2
Rows per page
Query Builder