Vs
"...system they're working on"
"I know there's a security issue... [Nobody] will tell me what it is"
"I don't have any information..."
This might sound crazy, but have you tried looking at "your" code base?
It's just genuinely baffling to read stuff like this.
I can't imagine feeling so helpless on something I was supposedly "working on".