fix security risk