author vulnerability