Vulnerabilities in promise-probe