fixes CVE-2020-7774
security advisory: https://github.com/advisories/GHSA-c4w7-xm78-47vh
#12569 (closed)