How do you handle security vulnerabilities and patches?