Add `tracking` to the vulnerability struct for post-analyzer processing (!10)