air sdk vulnerabilities and exploits