Vulnerabilities in build-metrics 1.1