Researchers found troubling bugs in open-source libraries used by financial institutions.