Vulnerabilities in rpm