WE
Product
WeKnora
15
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 3High 6Medium 6Low 0
Watch
Add WeKnora to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-91750 | 6.5 | Sep 15 | WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects Affected: 0.5.2 before 0.7.0 |
| CVE-2026-30859 | 6.5 | Mar 7 | WeKnora: Broken Access Control - Cross-Tenant Data Exposure Affected: < 0.2.12 |
| CVE-2026-108821 | 6.3 | Oct 12 | Tencent WeKnora SQL Validator inject.go validateSubquery sql injection Affected: 0.8.0; 0.8.1 |
| CVE-2026-8786 | 6.3 | May 18 | Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization Affected: 0.3.0; 0.3.1; 0.3.2; 0.3.3; 0.3.4; 0.3.5; +1 more |
| CVE-2026-118376 New | 5.3 | Oct 28 | WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses Affected: 0.2.11 before 0.8.2 |
| CVE-2026-30857 | 5.3 | Mar 7 | WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning Affected: < 0.3.0 |
Showing 6