Vulnerabilities are available under a granulal access:
if user has developer access, they get vulnerabilities in response.