1989: Brian Fox introduced code into Bash, later released as version 1.03, which included the first of the Shellshock vulnerabilities publicly reported 9,169 days later. That's 25 years, 1 month, and 13 days of exploitability.
Takeaway? You're always running exploitable code.