pjproject vulnerabilities