added fastreader command injection vulnerability