web/security: add 1.2.7 and 1.1.12