#vulnerability reporting