potential vulnerabilities