书籍 — vulnerability disclosure