tocsin

CVE-2026-30858

2 advisories.

Go/github.com/Tencent/WeKnora CVE-2026-30858: high 7.5

WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources

Action: Upgrade github.com/Tencent/WeKnora to 0.3.0 or later.

go get github.com/Tencent/WeKnora@v0.3.0

Affected

introducedfixedlast affected
00.3.0-

Fixed versions

0.3.0

Sources

CVE-2026-30858 · published · modified · JSON

Go/github.com/Tencent/WeKnora CVE-2026-30858: unknown

WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-30858 · published · modified · JSON