Describe a time when you identified a security vulnerability in a project. What steps did you take to address it?