The Node.js Foundation revealed a denial-of-service and an out-of-bounds access issue and said the fixes will come next week