OAS Platform vulnerabilities