[Git][security-tracker-team/security-tracker][master] Add new node-systeminformation issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b96b7b16 by Salvatore Bonaccorso at 2026-10-28T10:11:48+01:00
Add new node-systeminformation issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2057,9 +2057,13 @@ CVE-2026-116676 (Atlantis is a self-hosted golang application that listens for T
 CVE-2026-116675 (TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and ...)
 	TODO: check
 CVE-2026-116674 (systeminformation is a System and OS information library for node.js.  ...)
-	TODO: check
+	- node-systeminformation <unfixed>
+	NOTE: https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-7648-jmwf-vw7j
+	NOTE: Fixed by: https://github.com/sebhildebrandt/systeminformation/commit/6ff25a1ebc0b1fdc7a8aa3507e46f22007da2969 (v5.33.13)
 CVE-2026-116673 (systeminformation is a System and OS information library for node.js.  ...)
-	TODO: check
+	- node-systeminformation <unfixed>
+	NOTE: https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-4vjg-vx72-qq4g
+	NOTE: Fixed by: https://github.com/sebhildebrandt/systeminformation/commit/8d294b3139fec654a912969ac898037578a218cd (v5.33.14)
 CVE-2026-116672 (Authlib is a Python library which builds OAuth and OpenID Connect serv ...)
 	- python-authlib <unfixed>
 	NOTE: https://github.com/authlib/authlib/security/advisories/GHSA-c73q-w75p-j82v
@@ -2764,7 +2768,9 @@ CVE-2026-116577 (Tornado is a Python web framework and asynchronous networking l
 	NOTE: https://github.com/tornadoweb/tornado/pull/3765
 	NOTE: Fixed by: https://github.com/tornadoweb/tornado/commit/1b7a1dc9f340f52de929852e8125aa12f25297c9 (v6.6.0b1)
 CVE-2026-116576 (systeminformation is a System and OS information library for node.js.  ...)
-	TODO: check
+	- node-systeminformation <unfixed>
+	NOTE: https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-3f7j-7jwc-fxfj
+	NOTE: Fixed by: https://github.com/sebhildebrandt/systeminformation/commit/5014c6d25cfce7363b937977327baa853cdba0bf (v5.33.16)
 CVE-2026-116575 (Mem0 provides persistent memory infrastructure for AI agents and appli ...)
 	TODO: check
 CVE-2026-116556 (A vulnerability was found in Argilla up to 2.8.0. This affects an unkn ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b96b7b1693883e1d97371693104cbcd8060a257d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b96b7b1693883e1d97371693104cbcd8060a257d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/c823878f/attachment.htm>