mergeVulnerabilities