moved VulnerabilityOutput handling to CoreEngine from IssueHandler