potential vulnerability