fix security svace issue