correct vulnerability