canonical Maas Vulnerabilities