>Despite being from 2020, this vulnerability persists in 2025 with many airlines still exposing

What is the "vulnerability" by the "airlines" here?