Vunerability disclosure