update st, security issue
0.6.2