~ / search / GHSA-8j36-q8x7-pm6q

GHSA-8j36-q8x7-pm6q

OS Command Injection in systeminformation

Source: GitHub Advisory Database (reviewed) High CVE-2020-7778

Packages

EcosystemPackageAffectedFixed in
npm systeminformation < 4.30.2 4.30.2

Details

As written in the advisory (Markdown source, shown as plain text).

This affects the package systeminformation before 4.30.2. The attacker can overwrite the properties and functions of an object, which can lead to executing OS commands.

References

External links from the advisory. They lead to third-party sites.