1) critical vulnerability not coming in notification 2) devctl not saving high vulnerability criteria in DB