adding vulnerability hints to readme