added figaro to fix security flaw