A software engineer discovers a critical vulnerability in a company's proprietary software that could potentially compromise sensitive customer data. The engineer immediately reports the issue to their supervisor. What is the most appropriate action for the company to take in this situation?

Group of answer choices

Delay fixing the vulnerability to minimize disruption to ongoing projects.

Fix the vulnerability and notify affected customers as soon as possible.

Ignore the vulnerability since it has not been exploited yet.

Keep the vulnerability a secret to avoid damaging the company's reputation.