security vulnerability; upgrade component