performance vulnerabilities