fix vulnerability in tasks