first commit - with vulnerabilities