some validation at /vulns