How would you approach a situation where a critical vulnerability is discovered in a product that is already in production at Tavant?