fixed vulnerability