How to resolve owasp vulnerabilities