Not sure if you’re already trying to make a joke, but there’s a word for that, isn’t there? Negligence.

Doesn’t help your local restaurant if they didn’t get the memo about the poisonous scallops, particularly if there existed a regular scallop-poison-level newsletter they could check.

that could still be considered negligent, if it has a CVE and you're using it, you gotta know about it