Vulnerabilities in Pugjs software