js-vulnerabilities