Almost there on the shellshock vuln detection.  "VULN" changed to "WARNING"
"REALLY" almost there.   One more check to add.   The existing checks all seem to work as expected.