code verification vulnerabilities