Product
The systeminformation Node.js package contains a command injection vulnerability in its services() function on Windows caused by insufficient sanitization of Unicode curly quotation marks.