Has one of them ever gone more than a month without a CVE?