https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:16:25.458715+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-46011 EUVD-2026-46011 2026-10-04T04:16:25.461758+00:00 EUVD-2026-46011 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26245 fkie_cve-2020-26245 2026-10-04T04:16:25.461824+00:00

npm package systeminformation before version 4.30.5 is vulnerable to Prototype Pollution leading to Command Injection. The issue was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. The issue is fixed in version 4.30.5. If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetChecksite().

 https://cve.radiocsirt.org/vuln/ghsa-4v2w-h9jm-mqjg GHSA-4v2w-h9jm-mqjg — Prototype Pollution in systeminformation 2026-10-04T04:16:25.461872+00:00

Affected: npm: systeminformation

### Impact command injection vulnerability by prototype pollution

### Patches Problem was fixed with a rewrite of shell sanitations to avoid prototyper pollution problems. Please upgrade to version >= 4.30.2

### Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetChecksite()

### For more information If you have any questions or comments about this advisory:

* Open an issue in [systeminformation](https://github.com/sebhildebrandt/systeminformation/issues/new?template=bug_report.md)

 https://cve.radiocsirt.org/vuln/gsd-2020-26245 gsd-2020-26245 2026-10-04T04:16:25.461927+00:00 gsd-2020-26245