Vulnerability bounds on the number of spanning tree leaves