CVE-2020-15123
1 advisory.
npm/codecov CVE-2020-15123: critical 9.3, EPSS 3.81%
Command injection in codecov (npm package)
Action: Upgrade codecov to 3.7.1 or later.
npm i codecov@3.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.7.1 | - |
Fixed versions
| 3.7.1 |
Sources
- osv: GHSA-xp63-6vf5-xf3v
- https://github.com/codecov/codecov-node/security/advisories/GHSA-xp63-6vf5-xf3v
- https://nvd.nist.gov/vuln/detail/CVE-2020-15123
- https://github.com/codecov/codecov-node/pull/180
- https://github.com/codecov/codecov-node/commit/c0711c656686e902af2cd92d6aecc8074de4d83d
- https://github.com/advisories/GHSA-5q88-cjfq-g2mh
- https://lgtm.com/query/7714424068617023832
CVE-2020-15123 · published · modified · JSON