fix security bug version 3.0