[stevoo]

Well it all comes down to what bug holes you will release and what type of data you will be handling.

If you will be handling sensitive people information then you need to make sure that those are safe. Last thing you want is you new startup to be easily exposed and get a beating.

If someone might just game the site and get something that wont affect anyone else, then you might ignore the fix for a while.

But you should try and build whatever you are with a relative safety net. You cannot have bugs and holes in your system that will expose the system to hackers that will take over everything. Cause then it will be game over for you. No one will trust you afterwards.