Catálogo de CVE
CVE-2019-10800
Security update for python-codecov
This update for python-codecov fixes the following issues: - CVE-2019-10800: Fixed sanitization of gcov arguments before being being provided to the popen method (bsc#1201494).
- Gravedad
- Medium · CVSS 6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.21% · Oct 27, 2026
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Opensuseleap 15.4 | python-codecov | 2.0.15-150100.3.3.1 | Fixed | [SUSE-SU-2022:2752-1] |
| Opensuseleap 15.3 | python-codecov | 2.0.15-150100.3.3.1 | Fixed | [SUSE-SU-2022:2752-1] |
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Opensuseleap 15.3 | python-codecov | 2.0.15-150100.3.3.1 | Fixed | [SUSE-SU-2022:2752-1] |
| Opensuseleap 15.4 | python-codecov | 2.0.15-150100.3.3.1 | Fixed | [SUSE-SU-2022:2752-1] |
Original provider fields
{
"package_releases": [],
"fixed_versions": [],
"distribution_packages": [
{
"name": "python-codecov",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.15-150100.3.3.1"
}
]
}
],
"release": "leap 15.3",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2752-1",
"fixed_version": "2.0.15-150100.3.3.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2022:2752-1",
"provider_updated_at": "2026-02-04T04:21:51.827489Z"
},
{
"name": "python-codecov",
"distro": "opensuse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.0.15-150100.3.3.1"
}
]
}
],
"release": "leap 15.4",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2752-1",
"fixed_version": "2.0.15-150100.3.3.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2022:2752-1",
"provider_updated_at": "2026-02-04T04:21:51.827489Z"
}
]
}OpenFactory catalog packages
La asociación de paquetes está en curso.
Observado: