production vulnerabilities