—
GO-2026-4292
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora
Quick fix
GO-2026-4292 — github.com/Tencent/WeKnora: upgrade to the fixed version with the command below.
go get github.com/Tencent/WeKnora@v0.2.5Details
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/Tencent/WeKnora
Introduced in:
0Fixed in: 0.2.5Fix
go get github.com/Tencent/WeKnora@v0.2.5