fix vulnerability attack