Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 5

Количество 5

ubuntu логотип

CVE-2026-26318

6 месяцев назад

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` output in `versions()`. Version 5.31.0 fixes the issue.

CVSS3: 8.8
EPSS: Низкий
redhat логотип

CVE-2026-26318

6 месяцев назад

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` output in `versions()`. Version 5.31.0 fixes the issue.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2026-26318

6 месяцев назад

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` output in `versions()`. Version 5.31.0 fixes the issue.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2026-26318

6 месяцев назад

systeminformation is a System and OS information library for node.js. ...

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-5vv4-hvf7-2h46

6 месяцев назад

Command Injection via Unsanitized `locate` Output in `versions()` — systeminformation

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-26318

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` output in `versions()`. Version 5.31.0 fixes the issue.

CVSS3: 8.8
1%
Низкий
6 месяцев назад
redhat логотип
CVE-2026-26318

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` output in `versions()`. Version 5.31.0 fixes the issue.

CVSS3: 8.8
1%
Низкий
6 месяцев назад
nvd логотип
CVE-2026-26318

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` output in `versions()`. Version 5.31.0 fixes the issue.

CVSS3: 8.8
1%
Низкий
6 месяцев назад
debian логотип
CVE-2026-26318

systeminformation is a System and OS information library for node.js. ...

CVSS3: 8.8
1%
Низкий
6 месяцев назад
github логотип
GHSA-5vv4-hvf7-2h46

Command Injection via Unsanitized `locate` Output in `versions()` — systeminformation

CVSS3: 8.8
1%
Низкий
6 месяцев назад

Уязвимостей на страницу