Vulnerabilities in webpack software