Vulnerabilities in micromatch software