Security notifications for vulnerabilities