Dragonmonk111 junoclaw

• CVE-2026-43993 High 8.2 JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access 0.2%
• CVE-2026-43992 Critical 9.8 JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter 0.2%
• CVE-2026-43990 High 8.4 JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper 0.2%
• CVE-2026-43989 High 8.5 JunoClaw: upload_wasm accepted arbitrary filesystem paths without validation 0.1%
• CVE-2026-43991 High 8.4 JunoClaw: plugin-shell shell-injection bypass via substring blocklist 0.2%