security bug fix