crcn Sift.js Vulnerabilities