CVE-2020-7596

Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument

published January 25, 2020

CVSS
—
EPSS
2%
Percentile
79.1
In the wild
Unconfirmed
What it is

Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01859 · 79.1th percentile
Published
2020-01-25T18:08Z
EPSS history
Timeline
  • 25 JAN 18:08Z
    Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument
    cvelistv5