fixed a deadly serious security flaw