Patchfirst
Patchfirst
Chainsebhildebrandt · systeminformationnpm:systeminformation

sebhildebrandt systeminformation: successive fixes (2020–2026)

9 CVEs over 6 generations, 26 Oct 2020 to 27 Oct 2026. 1 is in .

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2020-775226 Oct 2020 First in the chain
  2. CVE-2020-777826 Nov 2020 related to CVE-2020-7752
  3. CVE-2020-2624527 Nov 2020 related to CVE-2020-7778related to CVE-2020-7752
  4. CVE-2020-2627416 Dec 2020 next fix after CVE-2020-26245related to CVE-2020-7778
  5. CVE-2021-2131516 Feb 2021KEV related to CVE-2020-7752related to CVE-2020-7778and 1 more
  6. CVE-2021-2138829 Apr 2021 related to CVE-2021-21315related to CVE-2020-7752and 2 more
  7. CVE-2025-6815416 Dec 2025 related to CVE-2020-7778related to CVE-2020-26245
  8. CVE-2026-11657626 Oct 2026 related to CVE-2020-7778related to CVE-2020-26245and 4 more
  9. CVE-2026-11667327 Oct 2026 related to CVE-2020-7778related to CVE-2020-26245and 1 more
20202021202220252026 CVE-2020-7752 → CVE-2020-7778: related (high confidence)CVE-2020-7778 → CVE-2020-26245: related (high confidence)CVE-2020-26245 → CVE-2020-26274: Next fix in the same package (high confidence)CVE-2021-21315 → CVE-2021-21388: related (high confidence)CVE-2020-7752 → CVE-2020-26245: related (medium confidence)CVE-2020-7752 → CVE-2021-21315: related (medium confidence)CVE-2020-7752 → CVE-2021-21388: related (medium confidence)CVE-2020-7778 → CVE-2020-26274: related (medium confidence)CVE-2020-7778 → CVE-2021-21315: related (medium confidence)CVE-2020-7778 → CVE-2021-21388: related (medium confidence)CVE-2020-7778 → CVE-2025-68154: related (medium confidence)CVE-2020-7778 → CVE-2026-116576: related (medium confidence)CVE-2020-7778 → CVE-2026-116673: related (medium confidence)CVE-2020-26245 → CVE-2021-21315: related (medium confidence)CVE-2020-26245 → CVE-2021-21388: related (medium confidence)CVE-2020-26245 → CVE-2025-68154: related (medium confidence)CVE-2020-26245 → CVE-2026-116576: related (medium confidence)CVE-2020-26245 → CVE-2026-116673: related (medium confidence)CVE-2020-26274 → CVE-2026-116576: related (medium confidence)CVE-2021-21315 → CVE-2026-116576: related (medium confidence)CVE-2021-21388 → CVE-2026-116576: related (medium confidence)CVE-2021-21388 → CVE-2026-116673: related (medium confidence)CVE-2026-116576 → CVE-2026-116673: Next fix in the same package (low confidence) CVE-2020-7752 26 Oct 2020 CVE-2020-7778 26 Nov 2020 CVE-2020-26245 27 Nov 2020 CVE-2020-26274 16 Dec 2020 CVE-2021-21315 16 Feb 2021 CVE-2021-21388 29 Apr 2021 CVE-2025-68154 16 Dec 2025 CVE-2026-116576 26 Oct 2026 CVE-2026-116673 27 Oct 2026 2020202120222023202420252026 CVE-2020-7752 → CVE-2020-7778: related (high confidence)CVE-2020-7778 → CVE-2020-26245: related (high confidence)CVE-2020-26245 → CVE-2020-26274: Next fix in the same package (high confidence)CVE-2021-21315 → CVE-2021-21388: related (high confidence)CVE-2020-7752 → CVE-2020-26245: related (medium confidence)CVE-2020-7752 → CVE-2021-21315: related (medium confidence)CVE-2020-7752 → CVE-2021-21388: related (medium confidence)CVE-2020-7778 → CVE-2020-26274: related (medium confidence)CVE-2020-7778 → CVE-2021-21315: related (medium confidence)CVE-2020-7778 → CVE-2021-21388: related (medium confidence)CVE-2020-7778 → CVE-2025-68154: related (medium confidence)CVE-2020-7778 → CVE-2026-116576: related (medium confidence)CVE-2020-7778 → CVE-2026-116673: related (medium confidence)CVE-2020-26245 → CVE-2021-21315: related (medium confidence)CVE-2020-26245 → CVE-2021-21388: related (medium confidence)CVE-2020-26245 → CVE-2025-68154: related (medium confidence)CVE-2020-26245 → CVE-2026-116576: related (medium confidence)CVE-2020-26245 → CVE-2026-116673: related (medium confidence)CVE-2020-26274 → CVE-2026-116576: related (medium confidence)CVE-2021-21315 → CVE-2026-116576: related (medium confidence)CVE-2021-21388 → CVE-2026-116576: related (medium confidence)CVE-2021-21388 → CVE-2026-116673: related (medium confidence)CVE-2026-116576 → CVE-2026-116673: Next fix in the same package (low confidence) CVE-2020-7752 26 Oct 2020 CVE-2020-7778 26 Nov 2020 CVE-2020-26245 27 Nov 2020 CVE-2020-26274 16 Dec 2020 CVE-2021-21315 16 Feb 2021 CVE-2021-21388 29 Apr 2021 CVE-2025-68154 16 Dec 2025 CVE-2026-116576 26 Oct 2026 CVE-2026-116673 27 Oct 2026
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2020-7752 26 Oct 2020 Command Injection · fixed in 4.27.11 First in chain 25.0
CVE-2020-7778 26 Nov 2020 Prototype Pollution · fixed in 4.30.2 CVE-2020-7752 · related · High 21.9
CVE-2020-26245 27 Nov 2020 Prototype Pollution leading to Command Injection in systeminformation · fixed in 4.30.5 CVE-2020-7778 · related · High 22.2
CVE-2020-26274 16 Dec 2020 Command Injection Vulnerability in systeminformation · fixed in 4.31.1 CVE-2020-26245 · Next fix in the same package · High 21.7
CVE-2021-21315KEV 16 Feb 2021 System Information Library for Node.JS Command Injection · fixed in 5.3.1 CVE-2020-7752 · related · Medium 68.4
CVE-2021-21388 29 Apr 2021 Command Injection Vulnerability in systeminformation · fixed in 5.6.4 CVE-2021-21315 · related · High 22.1
CVE-2025-68154 16 Dec 2025 Command Injection in fsSize() on Windows · fixed in 5.27.14 CVE-2020-7778 · related · Medium 24.9
CVE-2026-116576 26 Oct 2026 systeminformation: Windows command injection in services() through Unicode quotation marks · fixed in 5.33.16 CVE-2020-7778 · related · Medium 6.2
CVE-2026-116673 27 Oct 2026 systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net · fixed in 5.33.14 CVE-2020-7778 · related · Medium 2.8
↑ ↓ chooseEnter openEsc close