security bug resolved