If I knew, it would have a CVE number.

However, the less code you have, the fewer the places there are where you need to ask that question.