session

package

Go to main page

Versions in this module

v0

v0.9.0

Oct 29, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

Changes in this version

type AgentStreamHandler

+ func (h *AgentStreamHandler) Suspension() *types.PromptSuspension

type CreateKnowledgeQARequest

+ AssistantAccess types.AssistantAccessLevel

+ PageContext *types.PageContext

type CreateSessionRequest

+ Kind string

type Handler

+ func (h *Handler) CancelBackgroundWork(c *gin.Context)

+ func (h *Handler) CollaborationEvents(ctx context.Context, s *types.Session, m *types.Message, bus *event.EventBus) func(context.Context) error

+ func (h *Handler) CollaborationSteer(ctx context.Context, s *types.Session, m *types.Message) types.SteerSink

+ func (h *Handler) GetBackgroundWork(c *gin.Context)

+ func (h *Handler) HandlesDelegatedPrompt(ctx context.Context, p *types.AgentPrompt) bool

+ func (h *Handler) ListBackgroundWork(c *gin.Context)

+ func (h *Handler) ResumeSuspendedRun(c *gin.Context, prompt *types.AgentPrompt, ownerGone bool, ...)

+ func (h *Handler) SetCollaborationStopper(stop func(context.Context, string, string) error)

+ func (h *Handler) SetDelegatedPromptRouter(f func(context.Context, *types.AgentPrompt) bool)

+ func (h *Handler) SetSuspendedRuns(broker *hitl.Broker, runs *service.SuspendedRunService)

v0.8.3

Oct 14, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

Changes in this version

+ func DecodeBase64Attachment(data string) ([]byte, error)

+ func MatchApprovedDir(raw string, approved []string) (string, bool)

+ type AgentStreamHandler struct

+ func NewAgentStreamHandler(ctx context.Context, sessionID, assistantMessageID, requestID string, ...) *AgentStreamHandler

+ func (h *AgentStreamHandler) Subscribe()

+ type AttachmentProcessor struct

+ func NewAttachmentProcessor(fileService interfaces.FileService, documentReader interfaces.DocumentReader, ...) *AttachmentProcessor

+ func (p *AttachmentProcessor) ProcessAttachment(ctx context.Context, data []byte, fileName string, fileSize int64, ...) (*types.MessageAttachment, error)

+ type AttachmentUpload struct

+ Data string

+ FileName string

+ FileSize int64

+ type CreateKnowledgeQARequest struct

+ AgentEnabled bool

+ AgentID string

+ AgentSourceTenantID uint64

+ AttachmentIDs []string

+ AttachmentUploads []AttachmentUpload

+ Channel string

+ DisableTitle bool

+ Images []ImageAttachment

+ KnowledgeBaseIDs []string

+ KnowledgeIDs []string

+ LocalBrowserEnabled bool

+ MCPServiceIDs []string

+ MentionedItems []MentionedItemRequest

+ Query string

+ QuestionOrigin *types.QuestionOrigin

+ ReasoningEffort string

+ SkillNames []string

+ SuggestionAttribution *types.SuggestionAttribution

+ SummaryModelID string

+ TagIDs []string

+ WebSearchEnabled bool

+ type CreateSessionRequest struct

+ Description string

+ ProjectDir string

+ Title string

+ type ForkSessionRequest struct

+ MessageID string

+ Title string

+ type GenerateTitleRequest struct

+ Messages []types.Message

+ type Handler struct

+ func NewHandler(sessionService interfaces.SessionService, ...) *Handler

+ func (h *Handler) AgentQA(c *gin.Context)

+ func (h *Handler) BatchDeleteSessions(c *gin.Context)

+ func (h *Handler) BrowserSkillAccount(c *gin.Context)

+ func (h *Handler) BrowserSkillAuthorize(c *gin.Context)

+ func (h *Handler) BrowserSkillConnection(c *gin.Context)

+ func (h *Handler) BrowserSkillDownload(c *gin.Context)

+ func (h *Handler) BrowserSkillExtension(c *gin.Context)

+ func (h *Handler) BrowserSkillInternal(c *gin.Context)

+ func (h *Handler) ClearSessionMessages(c *gin.Context)

+ func (h *Handler) ContinueStream(c *gin.Context)

+ func (h *Handler) CreateSession(c *gin.Context)

+ func (h *Handler) DeleteLibraryArtifact(c *gin.Context)

+ func (h *Handler) DeleteMessageArtifact(c *gin.Context)

+ func (h *Handler) DeleteSession(c *gin.Context)

+ func (h *Handler) DeleteSteerMessage(c *gin.Context)

+ func (h *Handler) DeleteTemporaryDocument(c *gin.Context)

+ func (h *Handler) DownloadMessageArtifact(c *gin.Context)

+ func (h *Handler) ForkSession(c *gin.Context)

+ func (h *Handler) GenerateTitle(c *gin.Context)

+ func (h *Handler) GetSession(c *gin.Context)

+ func (h *Handler) GetSessionsByTenant(c *gin.Context)

+ func (h *Handler) GetTemporaryDocument(c *gin.Context)

+ func (h *Handler) IssueSandboxDesktopTicket(c *gin.Context)

+ func (h *Handler) IssueSandboxTerminalTicket(c *gin.Context)

+ func (h *Handler) KnowledgeQA(c *gin.Context)

+ func (h *Handler) ListArtifactLibrary(c *gin.Context)

+ func (h *Handler) ListMessageArtifacts(c *gin.Context)

+ func (h *Handler) ListSessionArtifacts(c *gin.Context)

+ func (h *Handler) ListSteerMessages(c *gin.Context)

+ func (h *Handler) ListTemporaryDocuments(c *gin.Context)

+ func (h *Handler) PinSession(c *gin.Context)

+ func (h *Handler) PreviewTemporaryDocument(c *gin.Context)

+ func (h *Handler) PromoteSteerMessage(c *gin.Context)

+ func (h *Handler) ReportSandboxDesktopActivity(c *gin.Context)

+ func (h *Handler) RewindSession(c *gin.Context)

+ func (h *Handler) SandboxDesktopWS(c *gin.Context)

+ func (h *Handler) SandboxTerminalWS(c *gin.Context)

+ func (h *Handler) SearchKnowledge(c *gin.Context)

+ func (h *Handler) SteerMessage(c *gin.Context)

+ func (h *Handler) StopSession(c *gin.Context)

+ func (h *Handler) UnpinSession(c *gin.Context)

+ func (h *Handler) UpdateSession(c *gin.Context)

+ func (h *Handler) UploadTemporaryDocument(c *gin.Context)

+ type HostProjectDirsLoader func() []string

+ type ImageAttachment struct

+ Caption string

+ Data string

+ URL string

+ type MentionedItemRequest struct

+ ID string

+ KBID string

+ KBName string

+ KBType string

+ Name string

+ ServiceID string

+ SkillName string

+ Type string

+ type RewindSessionRequest struct

+ MessageID string

+ type SandboxIDLookup interface

+ BoundSandboxID func(ctx context.Context, sessionID string) (string, bool)

+ type SearchKnowledgeRequest struct

+ DisableKeywordsMatch bool

+ DisableVectorMatch bool

+ KeywordThreshold *float64

+ KnowledgeBaseID string

+ KnowledgeBaseIDs []string

+ KnowledgeIDs []string

+ MatchCount int

+ MentionedItems []MentionedItemRequest

+ Query string

+ Rerank *types.RerankOptions

+ TagIDs []string

+ VectorThreshold *float64

+ type SteerMessageRequest struct

+ Channel string

+ Delivery string

+ ExpectedAssistantMessageID string

+ MentionedItems []MentionedItemRequest

+ Query string

+ SteerID string

+ type StopSessionRequest struct

+ MessageID string

v0.8.2

Sep 24, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.8.0

Sep 3, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.7.2

Aug 7, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.7.1

Jul 24, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.7.0

Jul 17, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.6.3

Jun 26, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.6.2

Jun 10, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.6.1

Jun 5, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.6.0

May 21, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.5.2

May 13, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.5.1

Apr 30, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.5.0

Apr 27, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.4.0

Apr 15, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.3.6

Apr 3, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.3.5

Mar 27, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.3.4

Mar 19, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.3.3

Mar 5, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.3.2

Mar 4, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.3.1

Feb 10, 2026 GO-2026-4637 +4 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.3.0

Feb 9, 2026 GO-2026-4637 +5 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4642: WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.2.14

Jan 30, 2026 GO-2026-4637 +5 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4642: WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.2.13

Jan 27, 2026 GO-2026-4637 +5 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4642: WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.2.12

Jan 26, 2026 GO-2026-4637 +5 more

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4642: WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.2.11

Jan 23, 2026 GO-2026-4628 +6 more

GO-2026-4628: WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4642: WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.2.10

Jan 16, 2026 GO-2026-4628 +6 more

GO-2026-4628: WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4642: WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

v0.2.9

Jan 5, 2026 GO-2026-4628 +7 more

GO-2026-4628: WeKnora is Vulnerable to SSRF via Redirection in github.com/Tencent/WeKnora

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4642: WeKnora Vulnerable to Broken Access Control in Tenant Management in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

GO-2026-4645: WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation in github.com/Tencent/WeKnora

v0.2.8

Dec 31, 2025 GO-2026-4628 +7 more