VetCoders vulnerabilities

Products

• mcp-server-semgrep 1

Latest VetCoders CVEs

Newest publication first

1. CVE-2026-7446 VetCoders mcp-server-semgrep MCP index.ts create_rule os command injection

   Published 2026-04-30

   Medium·CVSS 6.9 EPSS 1.5%

   A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyze_results/filter_results/export_results/compare_results/scan_directory/create_rule of the file src/index.ts of the component MCP Interface. The manipulation of the argument ID resu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.