SecAlerts
c

codecov

Security Risk Profile

40
/100
medium

Security Risk Score

Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from January 25, 2020 to present

4
Total CVEs
3
Critical+High
0
Exploited
0
Unpatched

Threat Assessment

Avg CVSS
8.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
40/100
medium

Severity Distribution

Critical
1
High
2
Medium
1
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
0

Age Distribution

Common Weaknesses (CWE)

1
Command Injection
4
2
OS Command Injection
3

Most Affected Products

1. Codecov Codecov Node.js2
2. pip/codecov1
3. Codecov Codecov-python1
4. npm/codecov1
5. Codecov Nodejs Uploader Node.js1

Recent Vulnerabilities

See more →

Monitor codecov in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

codecov Security Vulnerabilities & Risk Score | 4 CVEs | SecAlerts - SecAlerts