https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:03:30.333221+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-05431 bdu:2021-05431 2026-10-04T13:03:30.443714+00:00 bdu:2021-05431 https://cve.radiocsirt.org/vuln/certfr-2021-avi-671 certfr-2021-avi-671 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum Protect Plus. Elles permettent à un attaquant de prov… 2026-10-04T13:03:30.443754+00:00 certfr-2021-avi-671 https://cve.radiocsirt.org/vuln/euvd-2026-22217 EUVD-2026-22217 2026-10-04T13:03:30.443773+00:00 EUVD-2026-22217 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21388 fkie_cve-2021-21388 2026-10-04T13:03:30.443785+00:00

systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of systeminformation prior to 5.6.4. The issue has been fixed with a parameter check on user input. Please upgrade to version >= 5.6.4. If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() and other commands. Only allow strings, reject any arrays. String sanitation works as expected.

 https://cve.radiocsirt.org/vuln/ghsa-jff2-qjw8-5476 GHSA-jff2-qjw8-5476 — Command Injection Vulnerability in systeminformation 2026-10-04T13:03:30.443816+00:00

Affected: npm: systeminformation

### Impact command injection vulnerability

### Patches Problem was fixed with a parameter check. Please upgrade to version >= 5.6.4

### Workarounds If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() ... do only allow strings, reject any arrays. String sanitation works as expected.

 https://cve.radiocsirt.org/vuln/gsd-2021-21388 gsd-2021-21388 2026-10-04T13:03:30.443842+00:00 gsd-2021-21388