Documented security holes