coding tool vulnerabilities