Vendor / Project: Npm package Product: System Information Library for Node.JS Description: In this vulnerability, an attacker can send a malicious payload that will exploit the name parameter. After successful exploitation, attackers can execute remote. Required Action: Apply updates per vendor instructions. Due Date: 2022-02-01 Ransomware Campaign Use: Unknown CWEs: CWE-78 Notes: https://nvd.nist.gov/vuln/detail/CVE-2021-21315