total.js Flow Vulnerabilities