Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Codecov Python
MEDIUM 6.5
CVE-2019-10800
This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before being being provided to the pope…
Fix: 2.0.16+
Fix from $1,600
2022-07-13
Codecov
CRITICAL 9.3
CVE-2020-15123
In codecov (npm package) before version 3.7.1 the upload method has a command injection vulnerability. Clients of the codecov-node library are unlike…
Fix: 3.7.1+
Fix from $2,300
2020-07-20
Codecov
HIGH 8.8
CVE-2020-7597
codecov-node npm module before 3.6.5 allows remote attackers to execute arbitrary commands.The value provided as part of the gcov-root argument is ex…
Fix: 3.6.5+
Fix from $1,950
2020-02-17
Nodejs Uploader
HIGH 8.8
CVE-2020-7596
Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.
Fix: 3.6.2+
Fix from $1,950
2020-01-25