middleware vulnerabilities