The same would seemingly have been true of OpenSSL (software that protects secure transactions online), but the Heartbleed bug wasn't detected for over two years.