fix manifest form cve-9999