fix vulnerabilities