PyPI/codecov CVE-2019-10800: medium 6.5, EPSS 1.21%

Codecov does not sanitize gcov arguments

Action: Upgrade codecov to 2.0.16 or later.

pip install codecov==2.0.16

Affected

Fixed versions

Sources

• osv: GHSA-h3qr-fjhm-jphw
• https://nvd.nist.gov/vuln/detail/CVE-2019-10800
• https://github.com/codecov/codecov-python/commit/2a80aa434f74feb31242b6f213b75ce63ae97902
• https://github.com/advisories/GHSA-h3qr-fjhm-jphw
• https://github.com/codecov/codecov-python
• https://github.com/pypa/advisory-database/tree/main/vulns/codecov/PYSEC-2022-238.yaml
• https://snyk.io/vuln/SNYK-PYTHON-CODECOV-552149

CVE-2019-10800 · published 2022-07-14T00:00:23Z · modified 2024-11-18T16:26:26Z · JSON