avatar uploader project %5bobject Object%5d Vulnerabilities