nuwa/dev: links for vulnerable