fix security issue in dbutils