<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: dragonmonk111-junoclaw</title><description>Every new CVE for dragonmonk111-junoclaw.</description><link>https://agentprime.io/</link><item><title>CVE-2026-43993: JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access</title><link>https://agentprime.io/advisories/CVE-2026-43993/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43993/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 16:29:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-43992: JunoClaw: MCP write tools exposed raw BIP-39 mnemonic as a tool-call parameter</title><link>https://agentprime.io/advisories/CVE-2026-43992/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43992/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 16:25:30 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-43990: JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper</title><link>https://agentprime.io/advisories/CVE-2026-43990/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43990/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 16:22:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-43989: JunoClaw: upload_wasm accepted arbitrary filesystem paths without validation</title><link>https://agentprime.io/advisories/CVE-2026-43989/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43989/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 16:21:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-43991: JunoClaw: plugin-shell shell-injection bypass via substring blocklist</title><link>https://agentprime.io/advisories/CVE-2026-43991/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-43991/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 May 2026 16:19:54 GMT</pubDate><category>CVE</category></item></channel></rss>