added minimagick remote command injection vulnerability