Fixing LCM vulnerabilities