Critical jsPDF vulnerability enables arbitrary file read in Node.js deployments