https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:50:20.621387+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-187435 EUVD-2026-187435 2026-10-03T05:50:20.685313+00:00 EUVD-2026-187435 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42810 fkie_cve-2023-42810 2026-10-03T05:50:20.685354+00:00

systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to `wifiConnections()`, `wifiNetworks()` (string only).

 https://cve.radiocsirt.org/vuln/ghsa-gx6r-qc2v-3p3v GHSA-gx6r-qc2v-3p3v — systeminformation SSID Command Injection Vulnerability 2026-10-03T05:50:20.685389+00:00

Affected: npm: systeminformation

### Impact SSID Command Injection Vulnerability

### Patches Problem was fixed with a parameter check. Please upgrade to version >= 5.21.7, Version 4 was not affected

### Workarounds If you cannot upgrade, be sure to check or sanitize parameter strings that are passed to wifiConnections(), wifiNetworks() (string only)

### References See also https://systeminformation.io/security.html

 https://cve.radiocsirt.org/vuln/gsd-2023-42810 gsd-2023-42810 2026-10-03T05:50:20.685420+00:00 gsd-2023-42810