self-built CDN vulnerabilities