Vulnerabilities in build-metrics 1.3