Description
systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized locate output in versions(). Version 5.31.0 fixes the issue.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 npm | | | 5.31.0 |
 debian 14 | | =4.0.11+ds1+~cs11.25.27-7 || =4.0.11+ds1+~cs11.25.27-8 || =4.0.11+ds1+~cs11.25.27-9 || =4.0.11+ds2+~cs11.25.27-1 || =4.0.11+ds2+~cs11.25.27-3 || =4.0.11+ds3+~cs11.25.27-1 || =4.0.11+ds4+~cs11.25.27-1 || =4.0.11+ds4+~cs11.25.27-2 || =4.0.11+ds4+~cs11.25.27-3 || =4.0.11+ds4+~cs11.25.27-4 || >=0 <4.0.11+ds5+~cs11.25.27-1 | 4.0.11+ds5+~cs11.25.27-1 |
debian 13 | | =4.0.11+ds1+~cs11.25.27-7 || =4.0.11+ds1+~cs11.25.27-8 || =4.0.11+ds1+~cs11.25.27-9 || =4.0.11+ds2+~cs11.25.27-1 || =4.0.11+ds2+~cs11.25.27-3 || =4.0.11+ds3+~cs11.25.27-1 || =4.0.11+ds4+~cs11.25.27-1 || =4.0.11+ds4+~cs11.25.27-2 || =4.0.11+ds4+~cs11.25.27-3 || =4.0.11+ds4+~cs11.25.27-4 || =4.0.11+ds5+~cs11.25.27-1 || =4.0.13+ds1+~2.0.1+~cs1.4.4-1 || =4.1.3+ds1+~2.0.1+~0.15.3+~cs1.4.4-1 || =4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-1 || =4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-2 || =4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-3 || =4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-4 || =4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-5 || =4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-6 || =4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-7 || =4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-8 || =4.4.1+ds1+~3.0.5+~0.16.6+~cs1.4.4-1 || =4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-1 || =4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-2 || =4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 || =4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-4 || =4.4.8+ds1+~3.1.0+~0.16.6+~cs1.4.4-1 | - |
