Sebhildebrandt

The systeminformation library for Node.JS has a SSID Command Injection Vulnerability. This issue affects versions 5.0.0 through 5.21.6. The problem was fixed with a parameter check in version 5.21.7. The vulnerability can be exploited through the `wifiConnections()` and `wifiNetworks()` functions, specifically when passing string parameters. It is estimated that the library has 8 monthly downloads, potentially affecting a significant number of devices.

A command injection issue has been discovered in the systeminformation library for Node.js. This issue is related to errors in passing data to parameters of services such as `si.inetLatency`, `si.inetChecksite`, `si.services`, and `si.processLoad`. Exploitation of this issue could allow a remote attacker to execute arbitrary code. The problem has been fixed with a parameter check on user input.

The issue is a command injection vulnerability. It was fixed with a shell string sanitation fix. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue is a command injection vulnerability caused by prototype pollution. It was fixed with a rewrite of shell sanitations to avoid prototype pollution problems.

The issue is a command injection vulnerability. It was fixed with a shell string sanitation fix.