I'd imagine that at minimum, the team in charge of patching the vulnerability would need to review how the exploit works.