Vulnerabilities in security-bundle