How would you approach a situation where you discover a major vulnerability in a product just before launch?