A CISA analysis in collaboration with international partners concluded most critical open source projects potentially contain memory safety vulnerabilities