forgivable vulnerabilities