We haven't solved how to prevent critical software vulnerabilities in widely used open-source libraries from going unnoticed for years.
open
Global / Unspecified, Global
WS00750
Some of the internet's most widely used open-source components are maintained by very few volunteers, and serious vulnerabilities have been found lurking undetected for years in code millions of systems depend on. Better resourcing and review processes for open-source security remain inconsistently funded.