fix Istanbul CLI vulnerabilities