ROOT-APP-NPM-CVE-2026-26318 CVE-2026-26318 in @rootio/systeminformation - Patched by Root

Root has patched CVE-2026-26318 in the @rootio/systeminformation package for Root:npm. Multiple fixed versions available...

CVE-2026-26318

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized locate output in versions. Version 5.31.0 fixes the issue...