workaround security fix