GHSA-86hp-qxqp-w9wvPublished
VetCoders mcp-server-semgrep MCP index.ts create_rule os command injection
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-7446 · Microsoft / collected KEV context
cve-program · CVE-2026-7446
- https://vuldb.com/vuln/360187
- https://vuldb.com/vuln/360187/cti
- https://vuldb.com/submit/804100
- https://github.com/VetCoders/mcp-server-semgrep/issues/12
- https://github.com/VetCoders/mcp-server-semgrep/pull/15
- https://github.com/VetCoders/mcp-server-semgrep/commit/141335da044e53c3f5b315e0386e01238405b771
- https://github.com/VetCoders/mcp-server-semgrep/releases/tag/v1.0.1
- https://github.com/VetCoders/mcp-server-semgrep/
euvd · EUVD-2026-26302
- https://vuldb.com/vuln/360187
- https://vuldb.com/vuln/360187/cti
- https://vuldb.com/submit/804100
- https://github.com/VetCoders/mcp-server-semgrep/issues/12
- https://github.com/VetCoders/mcp-server-semgrep/pull/15
- https://github.com/VetCoders/mcp-server-semgrep/commit/141335da044e53c3f5b315e0386e01238405b771
- https://github.com/VetCoders/mcp-server-semgrep/releases/tag/v1.0.1
- https://github.com/VetCoders/mcp-server-semgrep/
nvd · CVE-2026-7446
- https://github.com/VetCoders/mcp-server-semgrep/
- https://github.com/VetCoders/mcp-server-semgrep/commit/141335da044e53c3f5b315e0386e01238405b771
- https://github.com/VetCoders/mcp-server-semgrep/issues/12
- https://github.com/VetCoders/mcp-server-semgrep/pull/15
- https://github.com/VetCoders/mcp-server-semgrep/releases/tag/v1.0.1
- https://vuldb.com/submit/804100
- https://vuldb.com/vuln/360187
- https://vuldb.com/vuln/360187/cti
osv · GHSA-86hp-qxqp-w9wv
- https://nvd.nist.gov/vuln/detail/CVE-2026-7446
- https://github.com/VetCoders/mcp-server-semgrep/issues/12
- https://github.com/VetCoders/mcp-server-semgrep/pull/15
- https://github.com/VetCoders/mcp-server-semgrep/commit/141335da044e53c3f5b315e0386e01238405b771
- https://github.com/VetCoders/mcp-server-semgrep
- https://github.com/VetCoders/mcp-server-semgrep/releases/tag/v1.0.1
- https://vuldb.com/submit/804100
- https://vuldb.com/vuln/360187
- https://vuldb.com/vuln/360187/cti
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.