fixed targets and vulnerability mappings