CVE-2019-10800: Codecov Codecov-Python

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before being being provided to the popen method.

Affected products

• Codecov Codecov-Python: before 2.0.16 (fixed in 2.0.16)

Published 2022-07-13. Last modified 2026-06-17.