cli vulnerabilities