upgrade for vulnerabilities