vulnerability fixes