when vulnerability list is not updated for more than a week. solves PR 11463 (there are other ways to solve this, i'm open to your opinion).