HIGH8.8npm
GHSA-5q88-cjfq-g2mh· CVE-2020-7597, SNYK-JS-CODECOV-548879codecov NPM module allows remote attackers to execute arbitrary commands
Modified: 7/8/2026
package
npm/codecov
pkg:npm/codecov
HIGH8.8npm
GHSA-mh2h-6j8q-x246· CVE-2020-7596Improper Neutralization of Special Elements in Output Used by a Downstream Component in Codecov
Modified: 3/16/2026
CRITICAL9.3npm
GHSA-xp63-6vf5-xf3v· CVE-2020-15123Command injection in codecov (npm package)
Modified: 2/4/2026