vetcoders/mcp-server-semgrep

GitHub

github.com

div0.space

Releases1

Frequency

Last Release about 2 months ago

Stars28

MCP Server Semgrep is a [Model Context Protocol](https://modelcontextprotocol.io) compliant server that integrates the powerful Semgrep static analysis tool with AI assistants like Anthropic Claude. It enables advanced code analysis, security vulnerability detection, and code quality improvements directly through a conversational interface.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-7446 ↗	Apr 30, 2026Thursday, 30 April 2026, 00:16	7.3 HIGH	7.5 HIGH
A vulnerability was detected in VetCoders mcp-server-semgrep 1.0.0. This affects the function analyze_results/filter_results/export_results/compare_results/scan_directory/create_rule of the file src/index.ts of the component MCP Interface. The manipulation of the argument ID results in os command injection. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 1.0.1 is able to mitigate this issue. The patch is identified as 141335da044e53c3f5b315e0386e01238405b771. It is advisable to upgrade the affected component.