The same thing I do if the vulnerability is in the binary itself, and not in a library.

Surely, if you care, you have a mitigation plan for this?