fix problem when vulnerability key does not exist