internal security vulnerabilities