HIGH7.3npmGHSA-86hp-qxqp-w9wv· CVE-2026-7446mcp-server-semgrep has a Command Injection issueModified: 5/6/2026