update vulnotes