Known Vulnerabilities in basic-auth-connect