Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

@evomap/evolver

npm

Evolver v2 beta public distribution package.

View on github.com · View on npmjs.org

High Security Advisories for @evomap/evolver in npm Clear Filters

High
3 months ago

@evomap/evolver's validator sandbox allowlist permits `npm`/`npx`, yielding RCE from Hub-delivered validation tasks via lifecycle scripts GSA_kwCzR0hTQS1qeGg4LWpoNzcteGg2Z84ABWNN

npm @evomap/evolver
High
3 months ago

@evomap/evolver: Path Traversal in `evolver fetch` default-branch `safeId` allows Hub-controlled overwrite of project files (RCE) GSA_kwCzR0hTQS1jZmNqLWhxcGYtaGNjZs4ABWNL

npm @evomap/evolver
High
3 months ago

Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write GSA_kwCzR0hTQS1yNDY2LXJ4dzQtM2o5as4ABVqp

npm @evomap/evolver

Filter by Severity

High 3 Moderate 2 Critical 1