CVE-2020-7596 Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument

Description

Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.

Affected products and versions

Product	Affected versions	Fixed in
codecov npm module	Versions not published

Other CVEs of codecov npm module

The 2 CVEs of codecov npm module →

CVE-2020-7597 codecov-node npm module before 3.6.5 allows remote attackers to execute arbitrary commands.The value provided as part of… Not rated