sounds like a vulnerability is included