CVE:CVE-2020-7596
CNNVD:CNNVD-202001-1112
Codecov NodeJs Uploader 3.6.2之前版本中存在注入漏洞。远程攻击者可借助‘gcov-args’参数利用漏洞执行任意命令。
solution:Upgrade codecov nodejs_uploader to a higher version than 3.6.2,and avoid the version (,3.6.2)