| Package | Affected versions | Patched versions |
|---|---|---|
| codecov | < 2.0.16 | 2.0.16 |
| codecov-python | < 2.0.16 | 2.0.16 |
This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before being being provided to the popen method.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free