Vulnerabilities in static-eval 1.0.0