Panic is the worst response to have in this situation. You have someone who is reporting this in good faith, who probably has an idea as to why the vulnerabilit

Panic is the worst response to have in this situation. You have someone who is reporting this in good faith, who probably has an idea as to why the vulnerability exists. Just come out and be like "I don't know what I'm doing" to the individual and see if they can help, and look to hire someone that does know what they're doing.