Update vulnerabilities.md