Unverified60% confidenceFactExact time
Before the Heartbleed vulnerability was disclosed in 2014, OpenSSL had only one core maintainer, and annual donations were less than two thousand dollars.
2
Sources
60%
Confidence
Long-term
Relevance
7/16/2026
First Seen
Sources
Related Claims
UnverifiedThe 2014 Heartbleed vulnerability in OpenSSL exposed the dire funding situation of core open-source maintainers74% similarVerifiedThe 2014 Heartbleed vulnerability was a serious flaw in the OpenSSL cryptography library that had existed for over two years and affected approximately 17% of secure web servers worldwide.70% similarVerifiedThe Heartbleed vulnerability existed in the OpenSSL codebase for more than two years before being discovered, directly leading to the establishment of the Core Infrastructure Initiative (CII, later evolved into OpenSSF).67% similarUnverifiedHeartbleed漏洞在OpenSSL代码库中潜伏约两年，glibc的GHOST漏洞(CVE-2015-0235)潜伏约14年66% similarUnverified2014年的OpenSSL Heartbleed漏洞因边界检查缺失导致内存越界读取，攻击者可借此窃取服务器内存中的私钥和用户数据64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/533451API
curl https://kongchang.com/api/v1/knowledge/claims/533451MCP
get_claim(id=533451)