Pinning to fix a security vulnerability