R vulnerability