HIGH8.8
GHSA-mh2h-6j8q-x246
Improper Neutralization of Special Elements in Output Used by a Downstream Component in Codecov
Quick fix
GHSA-mh2h-6j8q-x246 — codecov: upgrade to the fixed version with the command below.
npm install codecov@3.6.2Details
Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument.
Are you affected?
Enter the version of the package you're using.