Vulnerabilities in iobroker.js-controller