EvoMap

Products

ProductCVEsExploitedLatest
evolver3–May 4, 2026

Exploited and recent CVEs

  • CVE-2026-42077 Medium 5.2 Evolver: Prototype Pollution via `Object.assign()` in mailbox store operations 0.2%
  • CVE-2026-42076 Critical 9.8 Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution 1.7%
  • CVE-2026-42075 High 8.1 Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write 0.6%