hackerone Sprockets Vulnerabilities