8.8
High
CVE-2026-26318 systeminformation is a System and OS information library for node.js
Description
systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` output in `versions()`. Version 5.31.0 fixes the issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Developer Hub | Versions not published | |
| systeminformation 5.31 | earliest → < 5.31.0 | 5.31.0 |
Other CVEs of Red Hat Developer Hub
The 81 CVEs of Red Hat Developer Hub →
CVE-2026-114236
Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
3.3
Low
CVE-2026-92925
Redis: redis: out-of-bounds read via crafted cluster bus packets
7.1
High
CVE-2026-13676
fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs
7.5
High
CVE-2026-9697
Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or…
7.4
High