Vulnerabilities in OpenSearch software