hackerone Node.extend Vulnerabilities