[fix] track vulnerabilities without exploits