Are these critical vulnerabilities exploitable? If I run npm audit on some of my projects I get critical vulnerabilities on a package that Webpack is using during the build phase. Another interesting section is the paragraph about dynamic payloads, I can see Go Lang or Deno builds requesting modules from arbitrary urls being a security issue.