CVE-2020-7596

Publication date

2020-01-25 18:08:41

Family

snyk

State

PUBLISHED

Description

Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.