CVE-2013-2031 - SVG JavaScript detection bypass CVE-2013-2032 - Extensions can't fully block password changes ok MAINTAINER