Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the ""gcov-args"" argument.
https://snyk.io/vuln/SNYK-JS-CODECOV-543183
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7596
Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the ""gcov-args"" argument.
https://snyk.io/vuln/SNYK-JS-CODECOV-543183
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7596