What steps would you take if you discovered a potential security vulnerability in a live application?