”Flaws” or ”intentionally planted backdoors” a la xz? That one was targeting openssl as well.