Vulnerabilities in JS.run software