serious vulnerability fixed