fix for security vulnerabilities