Vulnerabilities in json-bigint