Hacker News Reader

Hide it behind VPN, so it's not accessible from outside.

Now patching becomes a responsibility, unless your organisation is willing to run knowingly vulnerable software.