In most jurisdictions I know, the developer would be safe if he could show that he warned management about the security problem. In situation like this always w

In most jurisdictions I know, the developer would be safe if he could show that he warned management about the security problem. In situation like this always write an e-mail to your manager and keep a copy in a safe place.