security flaws detected