add notes about vulnerabilities