[security] BUG REPORT