fixing vulnerability