CVE-2025-68154

A flaw was found in systeminformation. This vulnerability allows arbitrary command execution via an operating system OS command injection in the fsSize function on Windows systems, where the drive parameter is unsanitized and directly concatenated into a PowerShell command. Mitigation Mitigation...

CVE-2025-68154

systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the fsSize function in systeminformation is vulnerable to OS command injection on Windows systems. The optional drive parameter is directly concatenated into a PowerShell command without...