[anonbanker]

look at the list of CVE's since[0], as well as tedunangst's commentary on his blog[1]. they pair up nicely.

0. http://www.cvedetails.com/product/383/Openssl-Openssl.html?v...

1. http://www.tedunangst.com/flak/post/analysis-of-openssl-free...

[ktRolster]

20 vulnerabilities found so far in 2016 in openSSL, that's basically saying that the codebase is still not secure.