rosa vulnerabilities