Vulnerabilities in Mongoose 3.0