If a critical zero-day vulnerability is announced for a library used across multiple internal applications, what is your step-by-step response plan?