Skip to content
OpenAdvisories

Product · EvoMap

evolver

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.2
    CVE-2026-42077

    Evolver: Prototype Pollution via `Object.assign()` in mailbox store operations

    Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a prototype pollution vulnerability in the mailbox store module allows attackers to modify the behavior of all JavaScript objects by injecting malicious properties into Obje…

    EvoMap evolver @evomap/evolver npm