matrix Javascript Sdk Vulnerabilities