Open source software vulnerabilities exist for over four years before detection · HackerTrans