Open source software security vulnerabilities exist for over four years before detection

It can take an average of over four years for vulnerabilities in open-source software to be spotted, an area in the security community that needs to be addressed, GitHub researchers say.