chore(security): address security vulnerabilities (#4284)