Vulnerabilities in SquirrellyJS software