Then all Juniper code should be thought of as tainted. It&#x27;s really as simple as that. Juniper has announced that everything they have released can not be trusted.<p>EDIT:  
&gt; it was an open source library that was imported there would be a link to the CVE affecting that library<p>That would only be if it was a error in the library that caused this and not the way it was used.<p>I just do not see Juniper coming out and so casually saying, &quot;Our source code was clearly compromised, and this is the one instance of them changing our released code that we found.&quot;