← Database

CVE-2026-26318

HIGH CVSS: 8.8 Published: 2026-02-19 Modified: 2026-07-15

Description

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` output in `versions()`. Version 5.31.0 fixes the issue.

Affected Platforms

Systeminformation Systeminformation

Weakness Type

CWE-78, CWE-78

References