Affected by GO-2026-4637 and 4 other vulnerabilities

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

cmd/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/Tencent/WeKnora

Links

Open Source Insights

Directories ¶

Path	Synopsis
desktop
download
duckdb command
milvus-migrate milvus-migrate 将旧版 Milvus Collection 复制为支持中英文 BM25 的新 Collection。	milvus-migrate 将旧版 Milvus Collection 复制为支持中英文 BM25 的新 Collection。
server Bootstrap-time hooks that run after the DI container is built but before the HTTP server starts listening.	Bootstrap-time hooks that run after the DI container is built but before the HTTP server starts listening.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL