Vulnerabilities > Codecov > Nodejs Uploader

DATE CVE VULNERABILITY TITLE RISK
2020-01-25 CVE-2020-7596 Injection vulnerability in Codecov Nodejs Uploader
Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.
network
low complexity
codecov CWE-74
6.5