Dragonmonk111 Junoclaw vulnerabilities
- dragonmonk111 junoclawJunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access8.2 High
- dragonmonk111 junoclawJunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter9.8 Critical
- dragonmonk111 junoclawJunoClaw: plugin-shell shell-metacharacter injection via shell wrapper8.4 High
- dragonmonk111 junoclawJunoClaw: upload_wasm accepted arbitrary filesystem paths without validation8.5 High
- dragonmonk111 junoclawJunoClaw: plugin-shell shell-injection bypass via substring blocklist8.4 High