fix security vulnerabilities