Description
Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.
Remediation
References
https://snyk.io/vuln/SNYK-JS-CODECOV-543183
Related Vulnerabilities
CVE-2018-19056 Vulnerability in maven package org.webjars.npm:editor.md
CVE-2016-10735 Vulnerability in maven package org.webjars.bower:bootstrap
CVE-2023-39522 Vulnerability in npm package @goauthentik/api
CVE-2020-1938 Vulnerability in maven package org.apache.tomcat:tomcat-coyote
CVE-2020-6428 Vulnerability in maven package org.webjars.npm:electron