This particular breach is very bad. That said, for a piece of software as widely used as this, what is the actual count of vulnerabilities found? I've spent q

This particular breach is very bad. That said, for a piece of software as widely used as this, what is the actual count of vulnerabilities found? I've spent quite a bit of time in the openssl code base for various projects over the years. I find it generally readable, but then I've seen some pretty odd ball C code over the years.