Todo: update vulnerabilities.json

[holiman]

The vulnerability-reporting should be updated with the recent bugs.

Perhaps consider dropping the vulnerabilty-check. I'm unsure if people/users are even aware of it, and other channels are probably better for reaching out with vulnerability-info.

Right now it's maybe more maintenance-overhead than actual "gain".