Ok a real security vulnerability now