Vulnerabilities in js-bson 1.1.3