add 'path traversal' to vulner doc