Fix a typo: vunerability -> vulnerability