fix: address security scanner findings

fix: address security scanner findings #1109