CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2019-10800
Medium (6.5) in codecov codecov-python. EPSS 1.2% chance of exploitation in the next 30 days. Fixed in codecov 2.0.16.
This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before being being provided to the popen method.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
- CWE
- CWE-88
- Published
- Modified
- Record from
- the NVD, synced
Affected
- codecov:codecov-python
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-h3qr-fjhm-jphw | PyPI | codecov | <2.0.16 | 2.0.16 |
| PYSEC-2022-238 | PyPI | codecov | <2.0.16 | 2.0.16 |