CVE-2025-49223: billboard.js allows prototype pollution… – CVSS 9.8 · Watchpost