2017/10/GHSA-5j3g-jfq3-7jwx Arbitrary JavaScript Execution in bassmaster