vulnerability headers