Patchfirst
Patchfirst
Chainsebhildebrandt · systeminformationnpm:systeminformation

sebhildebrandt systeminformation: successive fixes (2020–2021)

6 CVEs over 5 generations, 26 Oct 2020 to 29 Apr 2021. 1 is in .

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2020-775226 Oct 2020 First in the chain
  2. CVE-2020-777826 Nov 2020 related to CVE-2020-7752
  3. CVE-2020-2624527 Nov 2020 related to CVE-2020-7778related to CVE-2020-7752
  4. CVE-2020-2627416 Dec 2020 related to CVE-2020-26245related to CVE-2020-7778
  5. CVE-2021-2131516 Feb 2021KEV related to CVE-2020-7752related to CVE-2020-7778and 1 more
  6. CVE-2021-2138829 Apr 2021 related to CVE-2021-21315related to CVE-2020-7752and 2 more
Oct 2020DecJan 2021FebMarApr CVE-2020-7752 → CVE-2020-7778: related (high confidence)CVE-2020-7778 → CVE-2020-26245: related (high confidence)CVE-2020-26245 → CVE-2020-26274: related (high confidence)CVE-2021-21315 → CVE-2021-21388: related (high confidence)CVE-2020-7752 → CVE-2020-26245: related (medium confidence)CVE-2020-7752 → CVE-2021-21315: related (medium confidence)CVE-2020-7752 → CVE-2021-21388: related (medium confidence)CVE-2020-7778 → CVE-2020-26274: related (medium confidence)CVE-2020-7778 → CVE-2021-21315: related (medium confidence)CVE-2020-7778 → CVE-2021-21388: related (medium confidence)CVE-2020-26245 → CVE-2021-21315: related (medium confidence)CVE-2020-26245 → CVE-2021-21388: related (medium confidence) CVE-2020-7752 26 Oct 2020 CVE-2020-7778 26 Nov 2020 CVE-2020-26245 27 Nov 2020 CVE-2020-26274 16 Dec 2020 CVE-2021-21315 16 Feb 2021 CVE-2021-21388 29 Apr 2021 Oct 2020DecJan 2021FebMarApr CVE-2020-7752 → CVE-2020-7778: related (high confidence)CVE-2020-7778 → CVE-2020-26245: related (high confidence)CVE-2020-26245 → CVE-2020-26274: related (high confidence)CVE-2021-21315 → CVE-2021-21388: related (high confidence)CVE-2020-7752 → CVE-2020-26245: related (medium confidence)CVE-2020-7752 → CVE-2021-21315: related (medium confidence)CVE-2020-7752 → CVE-2021-21388: related (medium confidence)CVE-2020-7778 → CVE-2020-26274: related (medium confidence)CVE-2020-7778 → CVE-2021-21315: related (medium confidence)CVE-2020-7778 → CVE-2021-21388: related (medium confidence)CVE-2020-26245 → CVE-2021-21315: related (medium confidence)CVE-2020-26245 → CVE-2021-21388: related (medium confidence) CVE-2020-7752 26 Oct 2020 CVE-2020-7778 26 Nov 2020 CVE-2020-26245 27 Nov 2020 CVE-2020-26274 16 Dec 2020 CVE-2021-21315 16 Feb 2021 CVE-2021-21388 29 Apr 2021
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2020-7752 26 Oct 2020 Command Injection · fixed in 4.27.11 First in chain 25.0
CVE-2020-7778 26 Nov 2020 Prototype Pollution · fixed in 4.30.2 CVE-2020-7752 · related · High 21.9
CVE-2020-26245 27 Nov 2020 Prototype Pollution leading to Command Injection in systeminformation · fixed in 4.30.5 CVE-2020-7778 · related · High 22.2
CVE-2020-26274 16 Dec 2020 Command Injection Vulnerability in systeminformation · fixed in 4.31.1 CVE-2020-26245 · related · High 21.7
CVE-2021-21315KEV 16 Feb 2021 System Information Library for Node.JS Command Injection · fixed in 5.3.1 CVE-2020-7752 · related · Medium 68.4
CVE-2021-21388 29 Apr 2021 Command Injection Vulnerability in systeminformation · fixed in 5.6.4 CVE-2021-21315 · related · High 22.1
↑ ↓ chooseEnter openEsc close