vulnerability response