vulnerable components