fix vuln issues