Product by Go

    Github.com/tencent/weknora

    10 known vulnerabilities in Github.com/tencent/weknora (Go), 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Github.com/tencent/weknora (Go)
    CriticalCVE-2026-30861

    WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation

    also in 1 other product

    		10.0
    CriticalCVE-2026-22688

    WeKnora has Command Injection in MCP stdio test

    also in 1 other product

    		10.0
    CriticalCVE-2026-30860

    WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool

    also in 1 other product

    		10.0
    HighCVE-2026-30855

    WeKnora: Broken Access Control in Tenant Management

    also in 1 other product

    		8.8
    HighCVE-2026-30858

    WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources

    also in 1 other product

    		6.5
    HighCVE-2026-30247

    WeKnora: SSRF via Redirection

    also in 1 other product

    		5.9
    CriticalCVE-2026-22687

    WeKnora vulnerable to SQL Injection

    also in 1 other product

    		5.6
    HighCVE-2026-30856

    Tencent WeKnora: Use of Incorrectly-Resolved Name or Reference

    also in 1 other product

    		5.9
    MediumCVE-2026-30857

    WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning

    also in 1 other product

    		5.3
    MediumCVE-2026-30859

    WeKnora: Broken Access Control - Cross-Tenant Data Exposure

    also in 1 other product

    		5.3

    All products by Go