mcp-server-semgrep has a Command Injection issue

A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyzeresults/filterresults/exportresults/compareresults/scandirectory/createrule of the file src/index.ts of the component MCP Interface. The manipulation of the argument ID results in os command...

CVE-2026-7446

A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyzeresults/filterresults/exportresults/compareresults/scandirectory/createrule of the file src/index.ts of the component MCP Interface. The manipulation of the argument ID results in os command...

CVE-2026-7446 VetCoders mcp-server-semgrep MCP index.ts create_rule os command injection

A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyzeresults/filterresults/exportresults/compareresults/scandirectory/createrule of the file src/index.ts of the component MCP Interface. The manipulation of the argument ID results in os command...

CVE-2026-7446 VetCoders mcp-server-semgrep MCP index.ts create_rule os command injection

A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyzeresults/filterresults/exportresults/compareresults/scandirectory/createrule of the file src/index.ts of the component MCP Interface. The manipulation of the argument ID results in os command...

CVE-2026-7446

VetCoders mcp-server-semgrep version 1.0.0 is affected by CVE-2026-7446 in the MCP Interface. The vulnerability exists in the file src/index.ts (functions analyze_results, filter_results, export_results, compare_results, scan_directory, create_rule) where manipulation of the argument ID enables a...

EUVD-2026-26302

A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyzeresults/filterresults/exportresults/compareresults/scandirectory/createrule of the file src/index.ts of the component MCP Interface. The manipulation of the argument ID results in os command...

CVE-2026-7446 VetCoders mcp-server-semgrep MCP index.ts create_rule os command injection

A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyzeresults/filterresults/exportresults/compareresults/scandirectory/createrule of the file src/index.ts of the component MCP Interface. The manipulation of the argument ID results in os command...

MCP Server Semgrep 命令注入漏洞

MCP Server Semgrep is an AI assistant tool for integrated static code analysis, open-sourced by VetCoders. Version 1.0.0 of MCP Server Semgrep contains a command injection vulnerability. This vulnerability stems from the handling of parameter IDs in the...

PT-2026-36030

Name of the Vulnerable Software and Affected Versions VetCoders mcp-server-semgrep version 1.0.0 Description Remote OS command injection is possible within the MCP Interface component in the file src/index.ts. The issue occurs when the ID argument is manipulated, affecting the functions analyze...

CVE-2026-7446: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyzeresults/filterresults/exportresults/compareresults/scandirectory/createrule of the file src/index.ts of the component MCP Interface. The manipulation of the argument ID results in os command...

CVE-2026-40347 vulnerabilities

Vulnerabilities for packages: airflow, kserve, semgrep...

GHSA-MJ87-HWQH-73PJ vulnerabilities

Vulnerabilities for packages: airflow, kserve, semgrep...

CVE-2026-32597 vulnerabilities

Vulnerabilities for packages: kserve, superset, ggshield, py3-cassandra-medusa, az, open-webui, datadog-agent, airflow, semgrep...

GHSA-752W-5FWX-JX9F vulnerabilities

Vulnerabilities for packages: kserve, superset, ggshield, py3-cassandra-medusa, az, open-webui, datadog-agent, airflow, semgrep...

CVE-2026-0994 vulnerabilities

Vulnerabilities for packages: mlflow, mitmproxy, kserve, kubeflow-pipelines, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, open-webui, py3-protobuf, datadog-agent, kubeflow-katib, airflow, semgrep...

GHSA-7GCM-G887-7QV7 vulnerabilities

Vulnerabilities for packages: mlflow, mitmproxy, kserve, kubeflow-pipelines, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, open-webui, py3-protobuf, datadog-agent, kubeflow-katib, airflow, semgrep...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: mlflow, pypy-3.11, dask-kubernetes, kserve, pypy-3.10, emissary, superset, py3-cassandra-medusa, kubeflow-jupyter-web-app, open-webui, datadog-agent, kubeflow-katib, py3-setuptools, airflow, semgrep...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: py3.9-setuptools, nemo, opal, wazuh-manager-fips, pypy-3.10, dask-kubernetes, mlflow, spamcheck, tritonserver-backend-vllm-cuda-12.9, py3-setuptools, authentik-fips, tensorflow-cpu-jupyter, ansible-operator, tensorflow-gpu-jupyter, kubeflow-katib, localstack,...

exploit-chain-generator

Exploit Chain Generator Turn Noise into Signal: Correlate...

GHSA-GM62-XV2J-4W53 vulnerabilities

Vulnerabilities for packages: barman, nemo, ggshield, pypy-3.10, dask-kubernetes, mlflow, spamcheck, tritonserver-backend-vllm-cuda-12.9, py3-pipenv, tensorflow-cpu-jupyter, ansible-operator, tensorflow-gpu-jupyter, kubeflow-katib, localstack, nvidia-nsight-compute-13.1, jupyter-docker-stacks,...