What would you do if you discovered a critical vulnerability in third-party software being used by Benjamin Moore?
