A similarly related topic would be log4j debacle and the lack of common awareness of it's features before being used as a vector for exploitation.