Recommended action

Monitor this advisory for an available fix and review any installs of the affected package.

hol-guard supply-chain scan

What this means

EVoke Systems EVoke CSMS Insufficiently Protected Credentials affects EVoke/EVoke CSMS (generic). Severity is medium. Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

AI coding agents often install or upgrade packages automatically in generic. A medium vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.

Affected software

Evidence and references

• https://evokesystems.com/contact-us/

Recommended action

Monitor this advisory for an available fix and review any installs of the affected package.

hol-guard supply-chain scan

What this means

EVoke Systems EVoke CSMS Insufficiently Protected Credentials affects EVoke/EVoke CSMS (generic). Severity is medium. Charging station authentication identifiers are publicly accessible via web-based mapping platforms.

AI coding agents often install or upgrade packages automatically in generic. A medium vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.

Affected software

Evidence and references

• https://evokesystems.com/contact-us/