Tag

systeminformation

Safeguard articles tagged "systeminformation" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

systeminformation npm package command injection (CVE-2021-21315)

A critical command injection flaw in the systeminformation npm package (CVE-2021-21315) let attackers run OS commands via unsanitized shell calls. Here's the full breakdown.

Jan 12, 20268 min read