npm/@evomap/evolver: high 8.8

@evomap/evolver: Path Traversal in `evolver fetch` default-branch `safeId` allows Hub-controlled overwrite of project files (RCE)

Action: Upgrade @evomap/evolver to 1.70.0-beta.5 or later.

npm i @evomap/evolver@1.70.0-beta.5

Affected

Fixed versions

Sources

• osv: GHSA-cfcj-hqpf-hccf
• https://github.com/EvoMap/evolver/security/advisories/GHSA-cfcj-hqpf-hccf
• https://github.com/EvoMap/evolver

published 2026-05-05T21:15:09Z · modified 2026-05-05T21:34:46.557963Z · JSON