The scramble to patch a security flaw shows just how much smaller players in travel depend on outside vendors to keep their websites safe.

Advertisement