Possible security issue

I use a product called Defender Pro from WPMUDEV. It does a regular file scan looking for potential security weaknesses. Today, it identified two issues in DataBuilder.php. Specifically, it states:

“The function extract line 692 column 13 execute using unsanitize user inputs.” Here are the lines in question:

691 if (!empty($_SERVER[‘HTTP_FORWARDED’])) {
692 extract($this->parseForwardedString($_SERVER[‘HTTP_FORWARDED’]));
693 }

“The function extract line 717 column 13 execute using unsanitize user inputs.” Here are the lines in question:

716 if (!empty($_SERVER[‘HTTP_FORWARDED’])) {
717 extract($this->parseForwardedString($_SERVER[‘HTTP_FORWARDED’]));
718 }

Thoughts?

Jack