npm/systeminformation CVE-2026-50289: high 8.8, EPSS 2.18%
systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux
Action: Upgrade systeminformation to 5.31.7 or later.
npm i systeminformation@5.31.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.31.7 | - |
Fixed versions
| 5.31.7 |
Sources
- osv: GHSA-5xpp-75jx-m839
- nvd: CVE-2026-50289
- https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-5xpp-75jx-m839
- https://github.com/sebhildebrandt/systeminformation/commit/bbfddde48672d0ee124fefdb3cb4442fd9dd4f03
- https://github.com/sebhildebrandt/systeminformation
- https://github.com/sebhildebrandt/systeminformation/releases/tag/v5.31.7
CVE-2026-50289 · published · modified · JSON