This PR is based on work from #44 but without the limitations of the existing vulnerability extension. This implements #38. Major changes from the vulnerability extension include: Each vulnerabili...