remove insecure package and add in allow/deny rules on server to limit db access