Vulnerabilities in EvoMap

3 results

CVE-2026-42076CRITICALEvolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code ExecutionEPSS 1.3%CVE-2026-42075HIGHEvolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File WriteEPSS 0.6%CVE-2026-42077MEDIUMEvolver: Prototype Pollution via `Object.assign()` in mailbox store operationsEPSS 0.1%