SECURITY: fix Qualys CVE-2020-SLCWD