codecov

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

codecov records in CISA KEV

No codecov vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Nodejs Uploader · all components

TI-2020-06118 CVE-2020-7596 · GHSA-mh2h-6j8q-x246

MEDIUM 42

Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01859 Published 2020-01-25 Fixed in 3.6.2 CWE-78