codecov records

4 published records for vendor codecov.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
38Monitor	CVE-2020-15123No exploit	Command injection in codecov (npm package)codecov · codecov · CWE-78 pre-auth RCE Command injection	Critical9.3	—	3.8%	Jul 20, 2020
36Monitor	CVE-2020-7597No exploit	codecov-node npm module before 3.6.5 allows remote attackers to execute arbitrary commands.The value provided as part of the gcov-root argumcodecov · codecov · CWE-78 RCE Command injection	High8.8	—	2.9%	Feb 17, 2020
36Monitor	CVE-2020-7596No exploit	Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.codecov · nodejs uploader · CWE-78 RCE Command injection	High8.8	—	1.9%	Jan 25, 2020
26Monitor	CVE-2019-10800No exploit	This affects the package codecov before 2.0.16.codecov · codecov-python · CWE-88	Medium6.5	—	1.2%	Jul 13, 2022

CVE-2020-15123
38Monitor
Command injection in codecov (npm package)
CriticalCVSS 9.3No exploitEPSS 4%
- pre-auth RCE
- Command injection
codecov · codecovJul 20, 2020
CVE-2020-7597
36Monitor
codecov-node npm module before 3.6.5 allows remote attackers to execute arbitrary commands.The value provided as part of the gcov-root argum
HighCVSS 8.8No exploitEPSS 3%
- RCE
- Command injection
codecov · codecovFeb 17, 2020
CVE-2020-7596
36Monitor
Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.
HighCVSS 8.8No exploitEPSS 2%
- RCE
- Command injection
codecov · nodejs uploaderJan 25, 2020
CVE-2019-10800
26Monitor
This affects the package codecov before 2.0.16.
MediumCVSS 6.5No exploitEPSS 1%
codecov · codecov-pythonJul 13, 2022