update to address security vulnerability