hackerone Merge Deep Node Module Vulnerabilities