chore: bump system info version to address arbitrary command injectio…

…n vulnerability in systeminformation Signed-off-by: yyomba <[email protected]>
open-telemetry · Dec 18, 2023 · 5b33b83 · 5b33b83
1 parent 7d110d5
commit 5b33b83
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/opentelemetry-host-metrics/package.json b/packages/opentelemetry-host-metrics/package.json
@@ -56,7 +56,7 @@
   },
   "dependencies": {
     "@opentelemetry/sdk-metrics": "^1.8.0",
-    "systeminformation": "^5.0.0"
+    "systeminformation": "^5.21.20"
   },
   "homepage": "https://github.com/open-telemetry/opentelemetry-js-contrib/tree/main/packages/opentelemetry-host-metrics#readme"
 }