eclipse foundation Openvsx Vulnerabilities