Vulnerabilities in vis.js software