Axios vulnerability with CVSS 10 over stated? | Hacker News Reader