What to do about open source vulnerabilities? Move fast, says Linux Foundation expert