patching json vunerability