Security
فارسی
All products

github.com/Tencent/WeKnora

Go · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WeKnora is Vulnerable to SSRF via RedirectionCVE-2026-30247 · GHSA-595M-WC8G-6QGCVersion ranges need review. github.com/Tencent/WeKnora Go Medium Fix reported
WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration ValidationCVE-2026-30861 · GHSA-R55H-3RWJ-HCMGVersion ranges need review. github.com/Tencent/WeKnora Go Critical Fix reported
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt InjectionCVE-2026-30856 · GHSA-67Q9-58VJ-32QXVersion ranges need review. github.com/Tencent/WeKnora Go Medium Fix reported
WeKnora has Unauthorized Cross‑Tenant Knowledge Base CloningCVE-2026-30857 · GHSA-8RF9-C59G-F82FVersion ranges need review. github.com/Tencent/WeKnora Go Medium Fix reported
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal ResourcesCVE-2026-30858 · GHSA-H6GW-8F77-MMMPVersion ranges need review. github.com/Tencent/WeKnora Go High Fix reported
WeKnora Vulnerable to Broken Access Control in Tenant ManagementCVE-2026-30855 · GHSA-CCJ6-79J6-CQ5QVersion ranges need review. github.com/Tencent/WeKnora Go Critical Fix reported
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query ToolCVE-2026-30860 · GHSA-8W32-6MRW-Q5WVVersion ranges need review. github.com/Tencent/WeKnora Go Critical Fix reported
WeKnora has Broken Access Control - Cross-Tenant Data ExposureCVE-2026-30859 · GHSA-2F4C-VRJQ-RCGVVersion ranges need review. github.com/Tencent/WeKnora Go High Fix reported
WeKnora vulnerable to SQL InjectionCVE-2026-22687 · GHSA-PCWC-3FW3-8CQVVersion ranges need review. github.com/Tencent/WeKnora Go Medium Fix reported
WeKnora has Command Injection in MCP stdio testCVE-2026-22688 · GHSA-78H3-63C4-5FQCVersion ranges need review. github.com/Tencent/WeKnora Go Critical Fix reported