But note. Root cause --> FOSS library with insufficient testing and/or bug searching.
Open source is a necessary condition to finding bugs.
It is not a sufficient condition for there being no bugs to find.
Actually looking at the f**king code (or running it through some of the available testing tools before release) would be a good idea.
Hint. If it compiles with a bunch of warnings and you released anyway, that's on you.
You can bet that's just burned some part of several TLA's zero day exploits.