security report: Fix incorrect fact.