This is terrible advice. Do not go to legal for this, ever. This is putting yourself and the company in a very bad position. Fix the vulnerability if you can.

This is terrible advice. Do not go to legal for this, ever. This is putting yourself and the company in a very bad position. Fix the vulnerability if you can. Help junior developers understand common issues if you can. Then move on to the next job with better practices.