EvoMap evolver
- CVE-2026-42077 Evolver: Prototype Pollution via `Object.assign()` in mailbox store operations 0.2%
- CVE-2026-42076 Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution 1.7%
- CVE-2026-42075 Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write 0.6%