chore(security): address security vulnerabilities (#4271)