security: fix four vulnerabilities (GHSA-779p-m5rp-r4h4) (#14734)