hackerone Mcstatic Node Module Vulnerabilities