Vulnerabilities in Newsletter 4.9.1