{
  "@id": "urn:uuid:d490670c-8ce1-4a1b-94f5-7e66796bca8a",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 9,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-13T19:57:49.342266+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-10-29T07:05:56.841018+00:00",
      "status_notes": "Vulnerability CVE-2020-26245 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2020-26245"
      },
      "action_statement": "Vulnerability CVE-2020-26245 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-10-29T07:00:16.985656+00:00",
      "status_notes": "Vulnerability CVE-2020-26274 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2020-26274"
      },
      "action_statement": "Vulnerability CVE-2020-26274 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-10-29T07:00:16.985656+00:00",
      "status_notes": "Vulnerability CVE-2020-26300 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2020-26300"
      },
      "action_statement": "Vulnerability CVE-2020-26300 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-10-29T07:04:28.598882+00:00",
      "status_notes": "Vulnerability CVE-2020-7752 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2020-7752"
      },
      "action_statement": "Vulnerability CVE-2020-7752 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-10-29T07:04:28.598882+00:00",
      "status_notes": "Vulnerability CVE-2020-7778 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2020-7778"
      },
      "action_statement": "Vulnerability CVE-2020-7778 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-10-29T07:05:56.841018+00:00",
      "status_notes": "Vulnerability CVE-2021-21315 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2021-21315"
      },
      "action_statement": "Vulnerability CVE-2021-21315 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-10-29T07:00:16.985656+00:00",
      "status_notes": "Vulnerability CVE-2021-21388 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2021-21388"
      },
      "action_statement": "Vulnerability CVE-2021-21388 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-10-29T07:07:18.587233+00:00",
      "status_notes": "Vulnerability CVE-2023-42810 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2023-42810"
      },
      "action_statement": "Vulnerability CVE-2023-42810 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-10-29T07:05:56.841018+00:00",
      "status_notes": "Vulnerability CVE-2024-56334 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2024-56334"
      },
      "action_statement": "Vulnerability CVE-2024-56334 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-68154 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2025-68154"
      },
      "action_statement": "Vulnerability CVE-2025-68154 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-10-29T04:17:38.235616+00:00",
      "status_notes": "Vulnerability CVE-2026-116576 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2026-116576"
      },
      "action_statement": "Vulnerability CVE-2026-116576 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-10-29T01:53:34.860114+00:00",
      "status_notes": "Vulnerability CVE-2026-116673 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2026-116673"
      },
      "action_statement": "Vulnerability CVE-2026-116673 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-10-29T01:54:26.951601+00:00",
      "status_notes": "Vulnerability CVE-2026-116674 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2026-116674"
      },
      "action_statement": "Vulnerability CVE-2026-116674 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-11-13T19:57:49.342266+00:00",
      "status_notes": "Vulnerability CVE-2026-26280 does not affect version 5.27.11 of systeminformation. not_affected \u2014 The CVE describes wifiNetworks(iface) re-using an unsanitized caller-supplied iface in a setTimeout retry (5.30.x). In 5.27.11, wifiNetworks(callback) takes no iface parameter. The interface name comes from local iwconfig output and is sanitized before the first call. The retry setTimeout callback declares an `iface` parameter but is never passed an argument, so it is undefined. No attacker-con...",
      "justification": "vulnerable_code_not_in_execute_path",
      "vulnerability": {
        "name": "CVE-2026-26280"
      },
      "impact_statement": "not_affected \u2014 The CVE describes wifiNetworks(iface) re-using an unsanitized caller-supplied iface in a setTimeout retry (5.30.x). In 5.27.11, wifiNetworks(callback) takes no iface parameter. The interface name comes from local iwconfig output and is sanitized before the first call. The retry setTimeout callback declares an `iface` parameter but is never passed an argument, so it is undefined. No attacker-con..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-26318 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2026-26318"
      },
      "action_statement": "Vulnerability CVE-2026-26318 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-44724 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2026-44724"
      },
      "action_statement": "Vulnerability CVE-2026-44724 affects version 5.27.11 of systeminformation."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/systeminformation@5.27.11",
          "identifiers": {
            "purl": "pkg:npm/systeminformation@5.27.11"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-50289 affects version 5.27.11 of systeminformation.",
      "vulnerability": {
        "name": "CVE-2026-50289"
      },
      "action_statement": "Vulnerability CVE-2026-50289 affects version 5.27.11 of systeminformation."
    }
  ]
}