semantic vulnerabilities