fixing security alerts