https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:42:13 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-05431 bdu:2021-05431 https://cve.radiocsirt.org/vuln/bdu:2021-05431 https://cve.radiocsirt.org/vuln/certfr-2021-avi-671 certfr-2021-avi-671 https://cve.radiocsirt.org/vuln/certfr-2021-avi-671 https://cve.radiocsirt.org/vuln/euvd-2026-22217 EUVD-2026-22217 https://cve.radiocsirt.org/vuln/euvd-2026-22217 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21388 <p>systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of systeminformation prior to 5.6.4. The issue has been fixed with a parameter check on user input. Please upgrade to version &gt;= 5.6.4. If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() and other commands. Only allow strings, reject any arrays. String sanitation works as expected.</p> <p>systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of systeminformation prior to 5.6.4. The issue has been fixed with a parameter check on user input. Please upgrade to version &gt;= 5.6.4. If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() and other commands. Only allow strings, reject any arrays. String sanitation works as expected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21388 https://cve.radiocsirt.org/vuln/ghsa-jff2-qjw8-5476 <p><strong>Affected:</strong> npm: systeminformation</p> <p>### Impact command injection vulnerability</p> <p>### Patches Problem was fixed with a parameter check. Please upgrade to version &gt;= 5.6.4</p> <p>### Workarounds If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() ... do only allow strings, reject any arrays. String sanitation works as expected.</p> <p><strong>Affected:</strong> npm: systeminformation</p> <p>### Impact command injection vulnerability</p> <p>### Patches Problem was fixed with a parameter check. Please upgrade to version &gt;= 5.6.4</p> <p>### Workarounds If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() ... do only allow strings, reject any arrays. String sanitation works as expected.</p> https://cve.radiocsirt.org/vuln/ghsa-jff2-qjw8-5476 https://cve.radiocsirt.org/vuln/gsd-2021-21388 gsd-2021-21388 https://cve.radiocsirt.org/vuln/gsd-2021-21388