https://advisories.gitlab.com/golang/github.com/tencent/weknora/CVE-2026-30858/
WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources |...
CVE-2026-30858 WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources: A DNS rebinding vulnerability in the web_fetch...
https://advisories.gitlab.com/golang/github.com/tencent/weknora/CVE-2026-30247/
WeKnora is Vulnerable to SSRF via Redirection | GitLab Advisory Database (GLAD)
CVE-2026-30247 WeKnora is Vulnerable to SSRF via Redirection: The application's "Import document via URL" feature is vulnerable to Server-Side Request Forgery...
vulnerablessrf
https://advisories.gitlab.com/golang/github.com/tencent/weknora/CVE-2026-22688/
WeKnora has Command Injection in MCP stdio test | GitLab Advisory Database (GLAD)
CVE-2026-22688 WeKnora has Command Injection in MCP stdio test: Remote Code Execution (RCE): Arbitrary command execution enables file creation/modification,...
command injection
https://advisories.gitlab.com/golang/github.com/tencent/weknora/CVE-2026-30861/
WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation...
CVE-2026-30861 WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation: A critical unauthenticated remote code...