Vulnerabilities in jscover