Skip to content
Threat Feed

Tag

Evomap

1 brief RSS
critical advisory

@evomap/evolver Path Traversal Vulnerability Leads to RCE

A path traversal vulnerability in `@evomap/evolver` allows a malicious A2A Hub to overwrite project files, leading to remote code execution when a user fetches a malicious skill.

@evomap/evolver path-traversal rce evomap
2r 2t