known security gaps