github.com/tencent/weknora
Open-source LLM knowledge platform: turn raw documents into a queryable RAG, an autonomous reasoning agent, and a self-maintaining Wiki.
View on Github
Activity
- Latest release
- 6d ago
- Total releases
- 37
- Cadence
- ~6 days
- Last 12 months
- 37
Reach
- Stars
- 19.1k
Details
- First release
- Sep 08, 2025
| Version | Released | |
|---|---|---|
v0.7.1
patch
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.7.1
patch
Dependencies (84)
+ 76 more |
|
v0.7.0
minor
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.7.0
minor
Dependencies (79)
+ 71 more |
|
v0.6.3
patch
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.6.3
patch
Dependencies (78)
+ 70 more |
|
v0.6.2
patch
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.6.2
patch
Dependencies (76)
+ 68 more |
|
v0.6.1
patch
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.6.1
patch
Dependencies (82)
+ 74 more |
|
v0.6.0
minor
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.6.0
minor
Dependencies (79)
+ 71 more |
|
v0.5.2
patch
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.5.2
patch
Dependencies (79)
+ 71 more |
|
v0.5.1
patch
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.5.1
patch
Dependencies (75)
+ 67 more |
|
v0.5.0
minor
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.5.0
minor
Dependencies (75)
+ 67 more |
|
v0.3.6
patch
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.3.6
patch
Dependencies (68)
+ 60 more |
|
v0.3.5
patch
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.3.5
patch
Dependencies (66)
+ 58 more |
|
v0.3.4
patch
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.3.4
patch
Dependencies (63)
+ 55 more |
|
v0.3.3
patch
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.3.3
patch
Dependencies (52)
+ 44 more |
|
v0.3.2
patch
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.3.2
patch
Dependencies (52)
+ 44 more |
|
v0.3.1
patch
5 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.3.1
patch
Dependencies (47)
+ 39 more |
|
v0.3.0
minor
6 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.3.0
minor
Dependencies (47)
+ 39 more |
|
v0.2.14
patch
6 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.2.14
patch
Dependencies (47)
+ 39 more |
|
v0.2.13
patch
6 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.2.13
patch
Dependencies (47)
+ 39 more |
|
v0.2.12
patch
6 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.2.12
patch
Dependencies (47)
+ 39 more |
|
v0.2.11
patch
7 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.2.11
patch
Dependencies (47)
+ 39 more |
|
v0.2.10
patch
7 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.2.10
patch
Dependencies (47)
+ 39 more |
|
v0.2.9
patch
8 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30861
GO-2026-4645
GHSA-r55h-3rwj-hcmg
Mar 10, 2026
WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation in github.com/Tencent/WeKnora WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation in github.com/Tencent/WeKnora Fixed in
0.2.10
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.2.9
patch
Dependencies (46)
+ 38 more |
|
v0.2.8
patch
8 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30861
GO-2026-4645
GHSA-r55h-3rwj-hcmg
Mar 10, 2026
WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation in github.com/Tencent/WeKnora WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation in github.com/Tencent/WeKnora Fixed in
0.2.10
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.2.8
patch
Dependencies (46)
+ 38 more |
|
v0.2.7
patch
8 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30861
GO-2026-4645
GHSA-r55h-3rwj-hcmg
Mar 10, 2026
WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation in github.com/Tencent/WeKnora WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation in github.com/Tencent/WeKnora Fixed in
0.2.10
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.2.7
patch
Dependencies (46)
+ 38 more |
|
v0.2.6
patch
8 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30861
GO-2026-4645
GHSA-r55h-3rwj-hcmg
Mar 10, 2026
WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation in github.com/Tencent/WeKnora WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation in github.com/Tencent/WeKnora Fixed in
0.2.10
References Updated Mar 23, 2026 · Source: OSV.dev |
v0.2.6
patch
Dependencies (43)
+ 35 more |
|
v0.2.5
patch
7 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev |
v0.2.5
patch
Dependencies (43)
+ 35 more |
|
v0.2.4
patch
9 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-22687
GO-2026-4293
GHSA-pcwc-3fw3-8cqv
Jan 12, 2026
WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2026-22688
GO-2026-4292
GHSA-78h3-63c4-5fqc
Jan 12, 2026
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.2.4
patch
Dependencies (42)
+ 34 more |
|
v0.2.3
patch
9 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-22687
GO-2026-4293
GHSA-pcwc-3fw3-8cqv
Jan 12, 2026
WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2026-22688
GO-2026-4292
GHSA-78h3-63c4-5fqc
Jan 12, 2026
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.2.3
patch
Dependencies (39)
+ 31 more |
|
v0.2.2
patch
9 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-22687
GO-2026-4293
GHSA-pcwc-3fw3-8cqv
Jan 12, 2026
WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2026-22688
GO-2026-4292
GHSA-78h3-63c4-5fqc
Jan 12, 2026
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.2.2
patch
Dependencies (39)
+ 31 more |
|
v0.2.1
minor
9 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-22687
GO-2026-4293
GHSA-pcwc-3fw3-8cqv
Jan 12, 2026
WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2026-22688
GO-2026-4292
GHSA-78h3-63c4-5fqc
Jan 12, 2026
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.2.1
minor
Dependencies (39)
+ 31 more |
|
v0.1.6
patch
9 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-22687
GO-2026-4293
GHSA-pcwc-3fw3-8cqv
Jan 12, 2026
WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2026-22688
GO-2026-4292
GHSA-78h3-63c4-5fqc
Jan 12, 2026
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.1.6
patch
Dependencies (34)
+ 26 more |
|
v0.1.5
patch
9 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-22687
GO-2026-4293
GHSA-pcwc-3fw3-8cqv
Jan 12, 2026
WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2026-22688
GO-2026-4292
GHSA-78h3-63c4-5fqc
Jan 12, 2026
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.1.5
patch
Dependencies (34)
+ 26 more |
|
v0.1.4
patch
9 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-22687
GO-2026-4293
GHSA-pcwc-3fw3-8cqv
Jan 12, 2026
WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2026-22688
GO-2026-4292
GHSA-78h3-63c4-5fqc
Jan 12, 2026
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.1.4
patch
Dependencies (33)
+ 25 more |
|
v0.1.3
patch
9 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-22687
GO-2026-4293
GHSA-pcwc-3fw3-8cqv
Jan 12, 2026
WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2026-22688
GO-2026-4292
GHSA-78h3-63c4-5fqc
Jan 12, 2026
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.1.3
patch
Dependencies (33)
+ 25 more |
|
v0.1.2
patch
9 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-22687
GO-2026-4293
GHSA-pcwc-3fw3-8cqv
Jan 12, 2026
WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2026-22688
GO-2026-4292
GHSA-78h3-63c4-5fqc
Jan 12, 2026
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.1.2
patch
Dependencies (31)
+ 23 more |
|
v0.1.1
patch
9 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-22687
GO-2026-4293
GHSA-pcwc-3fw3-8cqv
Jan 12, 2026
WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2026-22688
GO-2026-4292
GHSA-78h3-63c4-5fqc
Jan 12, 2026
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.1.1
patch
Dependencies (31)
+ 23 more |
|
v0.1.0
initial
9 CVEs
CVE-2026-30857
GO-2026-4640
GHSA-8rf9-c59g-f82f
Mar 10, 2026
WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30247
GO-2026-4628
GHSA-595m-wc8g-6qgc
Mar 10, 2026
WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora Fixed in
0.2.12
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30859
GO-2026-4637
GHSA-2f4c-vrjq-rcgv
Mar 10, 2026
WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30856
GO-2026-4638
GHSA-67q9-58vj-32qx
Mar 10, 2026
WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30860
GO-2026-4641
GHSA-8w32-6mrw-q5wv
Mar 10, 2026
WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30855
GO-2026-4642
GHSA-ccj6-79j6-cq5q
Mar 10, 2026
WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora Fixed in
0.3.1
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-30858
GO-2026-4643
GHSA-h6gw-8f77-mmmp
Mar 10, 2026
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora Updated Mar 23, 2026 · Source: OSV.dev
CVE-2026-22687
GO-2026-4293
GHSA-pcwc-3fw3-8cqv
Jan 12, 2026
WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2026-22688
GO-2026-4292
GHSA-78h3-63c4-5fqc
Jan 12, 2026
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora Fixed in
0.2.5
References Updated Mar 03, 2026 · Source: OSV.dev |
v0.1.0
initial
Dependencies (31)
+ 23 more |