diff --git a/SECURITY.md b/SECURITY.md
index 5915114dc5..528d343d64 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -17,7 +17,8 @@ receiving such patches depend on the CVSS v3.0 Rating:
 
 | CVSS v3.0 | Supported Versions                                 |
 | --------- | -------------------------------------------------- |
-| 7.3       | 3.5.5                                              |
+| 7.3       | 3.3.5                                              |
+| 9.8       | 3.3.6                                              |
 
 ## Reporting a Vulnerability
 
diff --git a/application/models/Employee.php b/application/models/Employee.php
index 160f017097..69e79e5b9e 100644
--- a/application/models/Employee.php
+++ b/application/models/Employee.php
@@ -327,12 +327,12 @@ public function login($username, $password)
 	{
 		$query = $this->db->get_where('employees', array('username' => $username, 'deleted' => 0), 1);
 
-		if($query->num_rows() == 1)
+		if($query->num_rows() === 1)
 		{
 			$row = $query->row();
 
 			// compare passwords depending on the hash version
-			if($row->hash_version == 1 && $row->password == md5($password))
+			if($row->hash_version === '1' && $row->password === md5($password))
 			{
 				$this->db->where('person_id', $row->person_id);
 				$this->session->set_userdata('person_id', $row->person_id);
@@ -340,7 +340,7 @@ public function login($username, $password)
 
 				return $this->db->update('employees', array('hash_version' => 2, 'password' => $password_hash));
 			}
-			elseif($row->hash_version == 2 && password_verify($password, $row->password))
+			elseif($row->hash_version === '2' && password_verify($password, $row->password))
 			{
 				$this->session->set_userdata('person_id', $row->person_id);