How the pressure of fixing the vulnerability was dumped on a tiny team over a frantic weekend