https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:25:11.513348+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-101 certfr-2021-avi-101 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum Protect Plus. Elles permettent à un attaquant de prov… 2026-10-03T22:25:11.517858+00:00 certfr-2021-avi-101 https://cve.radiocsirt.org/vuln/euvd-2026-46024 EUVD-2026-46024 2026-10-03T22:25:11.517921+00:00 EUVD-2026-46024 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26274 fkie_cve-2020-26274 2026-10-03T22:25:11.517954+00:00

In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix.

 https://cve.radiocsirt.org/vuln/ghsa-m57p-p67h-mq74 GHSA-m57p-p67h-mq74 — Command Injection Vulnerability in systeminformation 2026-10-03T22:25:11.518010+00:00

Affected: npm: systeminformation

### Impact command injection vulnerability

### Patches Problem was fixed with a shell string sanitation fix. Please upgrade to version >= 4.31.1

### Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetLatency()

### For more information If you have any questions or comments about this advisory: * Open an issue in [systeminformation](https://github.com/sebhildebrandt/systeminformation/issues/new?template=bug_report.md)

 https://cve.radiocsirt.org/vuln/gsd-2020-26274 gsd-2020-26274 2026-10-03T22:25:11.518066+00:00 gsd-2020-26274