{"action":"Upgrade mcp-server-semgrep to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"0"}],"component":"mcp-server-semgrep","cve_ids":["CVE-2026-7446"],"ecosystem":"npm","epss":0.01535,"exploited":false,"fixed_versions":["1.0.1"],"ghsa_id":"GHSA-86hp-qxqp-w9wv","id":"tcs_01M5KFBZTFH5MPHZVK5G1NGVKZ","modified_at":"2026-05-06T23:41:28.552350Z","published_at":"2026-04-30T00:31:22Z","references":["https://osv.dev/vulnerability/GHSA-86hp-qxqp-w9wv","https://nvd.nist.gov/vuln/detail/CVE-2026-7446","https://github.com/VetCoders/mcp-server-semgrep/issues/12","https://github.com/VetCoders/mcp-server-semgrep/pull/15","https://github.com/VetCoders/mcp-server-semgrep/commit/141335da044e53c3f5b315e0386e01238405b771","https://github.com/VetCoders/mcp-server-semgrep","https://github.com/VetCoders/mcp-server-semgrep/releases/tag/v1.0.1","https://vuldb.com/submit/804100","https://vuldb.com/vuln/360187","https://vuldb.com/vuln/360187/cti"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-86hp-qxqp-w9wv","url":"https://osv.dev/vulnerability/GHSA-86hp-qxqp-w9wv"}],"summary":"mcp-server-semgrep has a Command Injection issue"}