CRITICAL10.0npmGHSA-x3m3-4wpv-5vgc· CVE-2024-38999jrburke requirejs vulnerable to prototype pollutionModified: 9/10/2026