Description
Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.
Remediation
References
https://snyk.io/vuln/SNYK-JS-CODECOV-543183
Related Vulnerabilities
CVE-2023-32081 Vulnerability in maven package io.vertx:vertx-stomp
CVE-2020-7649 Vulnerability in npm package snyk-broker
CVE-2023-34464 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web
CVE-2016-10735 Vulnerability in npm package bootstrap
CVE-2010-1587 Vulnerability in maven package org.apache.activemq:apache-activemq