Threats affecting pkg:npm/vetcoders/mcp-server-semgrep

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 1.5%	CVE-2026-7446VetCoders mcp-server-semgrep · OS Command Injection Medium6.9EPSS 1.5%2026-04-30CVE Database V5CVE-2026-7446 CVE-2026-7446 is an OS command injection vulnerability in VetCoders mcp-server-semgrep version 1.0.0. The flaw exists in multiple functions within the MCP Interface component, specifically in src/index.ts, where manipulation of the argument ID allows remote attackers to execute arbitrary OS commands. A public exploit is available. Upgrading to version 1.0.1 mitigates the issue. EPSS 1.5%Vulnerability	CVE Database V5	2026-04-30

Page 1 of 1