Vulnerability reports are not special anymore