canvg prototype pollution vulnerability