SOAP vulnerability fix