Command Injection Flaw Exposes Millions of Node.js Systems to Attack

Versions of ‘systeminformation’ up to and including 5.23.6 are affected by this vulnerability. The maintainers have released version 5.23.7, which addresses the issue. Users are strongly urged to update to the latest version immediately.