Fix esr security vulnerabilites