https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:34:33.180942+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-60095 cnvd-2020-60095 2026-10-03T02:34:33.246304+00:00 cnvd-2020-60095 https://cve.radiocsirt.org/vuln/euvd-2026-181008 EUVD-2026-181008 2026-10-03T02:34:33.246341+00:00 EUVD-2026-181008 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7752 fkie_cve-2020-7752 2026-10-03T02:34:33.246356+00:00

This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to overwrite Javascript files and then execute any OS commands.

 https://cve.radiocsirt.org/vuln/ghsa-94xh-2fmc-xf5j GHSA-94xh-2fmc-xf5j — systeminformation command injection vulnerability 2026-10-03T02:34:33.246387+00:00

Affected: npm: systeminformation

### Impact command injection vulnerability

### Patches Problem was fixed with a shell string sanitation fix. Please upgrade to version >= 4.27.11

### Workarounds If you cannot upgrade, be sure to check or sanitize service parameter strings that are passed to si.inetChecksite()

### References _Are there any links users can visit to find out more?_

### For more information If you have any questions or comments about this advisory: * Open an issue in [systeminformation](https://github.com/sebhildebrandt/systeminformation/issues/new?template=bug_report.md)

 https://cve.radiocsirt.org/vuln/gsd-2020-7752 gsd-2020-7752 2026-10-03T02:34:33.246417+00:00 gsd-2020-7752