fix vuln