Copilot vulnerabilities