r vulnerability