HIGH7.5Go
GHSA-2f4c-vrjq-rcgv· CVE-2026-30859, GO-2026-4637WeKnora has Broken Access Control - Cross-Tenant Data Exposure
Modified: 3/23/2026
package
Go/github.com/Tencent/WeKnora
pkg:go/github.com/Tencent/WeKnora
MEDIUM5.9Go
GHSA-595m-wc8g-6qgc· CVE-2026-30247, GO-2026-4628WeKnora is Vulnerable to SSRF via Redirection
Modified: 3/23/2026
MEDIUM5.4Go
GHSA-67q9-58vj-32qx· CVE-2026-30856, GO-2026-4638WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection
Modified: 3/23/2026
CRITICAL9.9Go
GHSA-78h3-63c4-5fqc· CVE-2026-22688, GO-2026-4292WeKnora has Command Injection in MCP stdio test
Modified: 2/3/2026
MEDIUM5.9Go
GHSA-8rf9-c59g-f82f· CVE-2026-30857, GO-2026-4640WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning
Modified: 3/23/2026
CRITICAL10.0Go
GHSA-8w32-6mrw-q5wv· CVE-2026-30860, GO-2026-4641WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool
Modified: 3/23/2026
CRITICAL9.8Go
GHSA-ccj6-79j6-cq5q· CVE-2026-30855, GO-2026-4642WeKnora Vulnerable to Broken Access Control in Tenant Management
Modified: 3/23/2026
HIGH7.5Go
GHSA-h6gw-8f77-mmmp· CVE-2026-30858, GO-2026-4643WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources
Modified: 3/23/2026
MEDIUM5.6Go
GHSA-pcwc-3fw3-8cqv· CVE-2026-22687, GO-2026-4293WeKnora vulnerable to SQL Injection
Modified: 3/6/2026
CRITICAL10.0Go
GHSA-r55h-3rwj-hcmg· CVE-2026-30861, GO-2026-4645WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation
Modified: 3/23/2026
—Go
GO-2026-4292· CVE-2026-22688, GHSA-78h3-63c4-5fqcWeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora
Modified: 3/3/2026
—Go
GO-2026-4293· CVE-2026-22687, GHSA-pcwc-3fw3-8cqvWeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora
Modified: 3/3/2026
—Go
GO-2026-4628· CVE-2026-30247, GHSA-595m-wc8g-6qgcWeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora
Modified: 3/23/2026
—Go
GO-2026-4637· CVE-2026-30859, GHSA-2f4c-vrjq-rcgvWeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora
Modified: 3/23/2026
—Go
GO-2026-4638· CVE-2026-30856, GHSA-67q9-58vj-32qxWeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora
Modified: 3/23/2026
—Go
GO-2026-4640· CVE-2026-30857, GHSA-8rf9-c59g-f82fWeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora
Modified: 3/23/2026
—Go
GO-2026-4641· CVE-2026-30860, GHSA-8w32-6mrw-q5wvWeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora
Modified: 3/23/2026
—Go
GO-2026-4642· CVE-2026-30855, GHSA-ccj6-79j6-cq5qWeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora
Modified: 3/23/2026
—Go
GO-2026-4643· CVE-2026-30858, GHSA-h6gw-8f77-mmmpWeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora
Modified: 3/23/2026
—Go
GO-2026-4645· CVE-2026-30861, GHSA-r55h-3rwj-hcmgWeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation in github.com/Tencent/WeKnora
Modified: 3/23/2026