fixed vulnerability_model choices variable