NetSight
medium6.5

CVE-2019-10800

This affects the package codecov before 2.0.16.

Impact

This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before being being provided to the popen method.

Affected products

VendorProductAffected versions
CodecovCodecov-Python
before 2.0.16

Weakness classification

References