fsSize() fix drive sanitation (windows)

sebhildebrandt · sebhildebrandt · commit c52f9fd07fef · 2025-12-16T07:18:20.000+01:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -90,6 +90,7 @@ For major (breaking) changes - **version 4, 3 and 2** - see end of page.
 
 | Version | Date       | Comment                                                                                             |
 | ------- | ---------- | --------------------------------------------------------------------------------------------------- |
+| 5.27.14 | 2025-12-15 | `fsSize()` fix drive sanitation (windows)                                                           |
 | 5.27.13 | 2025-12-10 | `cpuCurrentSpeed()` fix hasOwnProperty                                                              |
 | 5.27.12 | 2025-12-09 | `networkConnections()` fix pid issue (macOS)                                                        |
 | 5.27.11 | 2025-10-05 | `system()` added latest mac studio versions (macOS)                                                 |
diff --git a/docs/history.html b/docs/history.html
@@ -57,6 +57,11 @@ <h3>Full version history</h3>
                     </tr>
                   </thead>
                   <tbody>
+                    <tr>
+                      <th scope="row">5.27.14</th>
+                      <td>2025-12-16</td>
+                      <td><span class="code">fsSize()</span> fix sanitation drive (windows)</td>
+                    </tr>
                     <tr>
                       <th scope="row">5.27.13</th>
                       <td>2025-12-10</td>
diff --git a/docs/index.html b/docs/index.html
@@ -166,11 +166,11 @@
 <body>
   <header class="bg-image-full">
     <div class="top-container">
-      <a href="security.html" class="recommendation">Security advisory:<br>Update to v5.23.7</a>
+      <a href="security.html" class="recommendation">Security advisory:<br>Update to v5.27.14</a>
       <img class="logo" src="assets/logo.png" alt="logo">
       <div class="title">systeminformation</div>
       <div class="subtitle"><span id="typed"></span>&nbsp;</div>
-      <div class="version">New Version: <span id="version">5.27.13</span></div>
+      <div class="version">New Version: <span id="version">5.27.14</span></div>
       <button class="btn btn-light" onclick="location.href='https://github.com/sebhildebrandt/systeminformation'">View on Github <i class=" fab fa-github"></i></button>
     </div>
     <div class="down">
diff --git a/docs/security.html b/docs/security.html
@@ -44,6 +44,21 @@
             <div class="col-12 sectionheader">
               <div class="title">Security Advisories</div>
               <div class="text">
+                <h2>fsSize Command Injection Vulnerability</h2>
+                <p><span class="bold">Affected versions:</span>
+                  &lt; 5.23.14<br>
+                  <span class="bold">Date:</span> 2025-12-16<br>
+                  <span class="bold">CVE indentifier</span> CVE-???
+                </p>
+
+                <h4>Impact</h4>
+                <p>We had an issue that there was a possibility to perform a potential command injection possibility by manipulating Win32_logicaldisk input in <span class="code">fsSize()</span> on windows machines.</p>
+
+                <h4>Patch</h4>
+                <p>Problem was fixed with parameter checking. If you are using version 5, please upgrade to version >= 5.27.14.</p>
+                <hr>
+                <br>
+
                 <h2>SSID Command Injection Vulnerability</h2>
                 <p><span class="bold">Affected versions:</span>
                   &lt; 5.23.7<br>
diff --git a/lib/filesystem.js b/lib/filesystem.js
diff --git a/lib/util.js b/lib/util.js
