CVE-2026-7446
1 advisory.
npm/mcp-server-semgrep CVE-2026-7446: high 7.3
mcp-server-semgrep has a Command Injection issue
Action: Upgrade mcp-server-semgrep to 1.0.1 or later.
npm i mcp-server-semgrep@1.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.1 | - |
Fixed versions
| 1.0.1 |
Sources
- osv: GHSA-86hp-qxqp-w9wv
- https://nvd.nist.gov/vuln/detail/CVE-2026-7446
- https://github.com/VetCoders/mcp-server-semgrep/issues/12
- https://github.com/VetCoders/mcp-server-semgrep/pull/15
- https://github.com/VetCoders/mcp-server-semgrep/commit/141335da044e53c3f5b315e0386e01238405b771
- https://github.com/VetCoders/mcp-server-semgrep
- https://github.com/VetCoders/mcp-server-semgrep/releases/tag/v1.0.1
- https://vuldb.com/submit/804100
- https://vuldb.com/vuln/360187
- https://vuldb.com/vuln/360187/cti
CVE-2026-7446 · published · modified · JSON