Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: codecov Clear all filters
TI-2019-08065 CVE-2019-10800 · GHSA-h3qr-fjhm-jphw

Command injection in codecov

Priority LOW 31

This affects the package codecov before 2.0.16.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01211 Published 2022-07-13 Fixed in 2.0.16 CWE-88
TI-2020-11896 CVE-2020-15123 · GHSA-xp63-6vf5-xf3v

Command injection in codecov (npm package)

Priority MEDIUM 47

In codecov (npm package) before version 3.7.1 the upload method has a command injection vulnerability.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.03805 Published 2020-07-20 Fixed in 3.7.1 CWE-78
TI-2020-06119 CVE-2020-7597 · GHSA-5q88-cjfq-g2mh

OS command injection in codecov npm module

Priority MEDIUM 43

codecov-node npm module before 3.6.5 allows remote attackers to execute arbitrary commands.The value provided as part of the gcov-root argument is executed by the exec function within lib/codecov.js.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02918 Published 2020-02-17 Fixed in 3.6.5 CWE-78