{"action":"Upgrade systeminformation to 4.31.1 or later.","affected":[{"fixed":"4.31.1","introduced":"0"}],"component":"systeminformation","cve_ids":["CVE-2020-26274"],"ecosystem":"npm","epss":0.02745,"exploited":false,"fixed_versions":["4.31.1"],"ghsa_id":"GHSA-m57p-p67h-mq74","id":"tcs_01M5KFZMATTFM5BRFJ1SQB6DHB","modified_at":"2026-09-10T03:49:00.562840010Z","published_at":"2020-12-16T19:25:00Z","references":["https://osv.dev/vulnerability/GHSA-m57p-p67h-mq74","https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-m57p-p67h-mq74","https://nvd.nist.gov/vuln/detail/CVE-2020-26274","https://github.com/sebhildebrandt/systeminformation/commit/1faadcbf68f1b1fdd5eb2054f68fc932be32ac99","https://www.npmjs.com/advisories/1590","https://www.npmjs.com/package/systeminformation"],"severity":{"label":"medium","score":6.4},"sources":[{"source":"osv","source_id":"GHSA-m57p-p67h-mq74","url":"https://osv.dev/vulnerability/GHSA-m57p-p67h-mq74"}],"summary":"Command Injection Vulnerability in systeminformation"}