What would you suggest if one works in a company but finds something wrong on some part of the company he or she is not working on? Let's say for example that a secretary or even his or her friend finds a misprint or SQL-injection on company's website. Is it help or hinder if he or she concentrates on wrong subjects?
If you find a mistake regardless of who's mistake it is and there is potential to impact company operations or systems (IT, financial etc), then you should report it. The last thing you want is to see something and do nothing about it; especially if it can generate blow back later on. Reporting it is a matter of supporting the company and the best interest of all stakeholders. Report the matter to the appropriate chain of command and let them decide how to best respond.
You can't put all mistakes in the same bucket. A "your" when it should be "you're" does not warrent reporting unless it is in a contract. A SQL injection vulnerability on an outward facing server then yes report it. If in doubt ask you're boss.