Open Source Security Bugs Uncovered