fix Security breach found by Tencent Blade Team please refer to security advisory - CVE-2020-11068
first commit for opensource