EvoMap
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| evolver | 3 | – | May 4, 2026 |
Exploited and recent CVEs
- CVE-2026-42077 Evolver: Prototype Pollution via `Object.assign()` in mailbox store operations 0.2%
- CVE-2026-42076 Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution 1.7%
- CVE-2026-42075 Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write 0.6%