Security bug fixed