The software development company I work for has around 40-50 employees with about 12 of those being developers. I work as a junior developer and have been working for about a year after completing an apprenticeship last year. This puts me at the bottom of the rank in regard to making decisions about our main product. But in saying that I have noticed a very large problem with the security of our product. A cringe-worthy problem that could cost the company a lot of money if it is exploited.
I know that it is on my managers' radar as there are tickets raised but they are old tickets that look like they have been forgotten. When I first joined the company I mentioned the problem and he agreed it needed to be fixed but didn't say much more than that. This makes me want to take things into my own hands for my own protection of keeping it from being exploited and losing a job because the company has to pay a fine.
How could I get the attention of my manager and potentially his manager and show them how much of a risk it is to not fix this security problem? Please keep in mind that I don't want to this to seem like I'm going above my manager to get my way, I have a good relationship with my manager at the moment and would hate to ruin it with something like this.