Affected by GO-2026-4637
and 4 other vulnerabilities
GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora
GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora
GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora
GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora
GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora
Package imageprep turns stored image bytes into an image a model will take:
converted to a format the vendor documents and shrunk to its size limit.
Embedding and rerank both send images and share these rules.
Prepare turns stored image bytes into an image the model will take.
An image already in an accepted format and within the byte limit goes as
it is; anything else is re-encoded — as JPEG where the vendor takes it,
PNG otherwise — and scaled down until it fits.
Affected by 
Documentation
¶
Source Files