Fix CVE issue