trusted publishing vulnerability