CVE-2025-68154
1 advisory.
npm/systeminformation CVE-2025-68154: high 8.1, EPSS 12.99%
systeminformation has a Command Injection vulnerability in fsSize() function on Windows
Action: Upgrade systeminformation to 5.27.14 or later.
npm i systeminformation@5.27.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.27.14 | - |
Fixed versions
| 5.27.14 |
Sources
- osv: GHSA-wphj-fx3q-84ch
- https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-wphj-fx3q-84ch
- https://nvd.nist.gov/vuln/detail/CVE-2025-68154
- https://github.com/sebhildebrandt/systeminformation/commit/c52f9fd07fef42d2d8e8c66f75b42178da701c68
- https://github.com/sebhildebrandt/systeminformation
CVE-2025-68154 · published · modified · JSON