add a fix to remove a security vulnerability