fix: resolve 61 security audit findings, mitigate 7, document 5 upstream

fix: resolve 61 security audit findings, mitigate 7, document 5 upstream #2106