What’s Vulnerable › Products

Dragonmonk111 junoclaw vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Dragonmonk111 junoclaw version is affected

Latest Dragonmonk111 junoclaw vulnerabilities

• CVE-2026-43993 — JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access (CVSS 8.2)
• CVE-2026-43992 — JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter (CVSS 9.8)
• CVE-2026-43991 — JunoClaw: plugin-shell shell-injection bypass via substring blocklist (CVSS 8.4)
• CVE-2026-43990 — JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper (CVSS 8.4)
• CVE-2026-43989 — JunoClaw: upload_wasm accepted arbitrary filesystem paths without validation (CVSS 8.5)