Maxime Villard has been doing great work finding lots of bugs, many with a code scanner he wrote called Brainy. As an OpenBSD user I've been watching with interest from the sidelines. More info on Brainy results:

https://www.m00nbsd.net/474b193ce624a19d39a2286d73f06826.htm...

Take a look! There is likely software that you use in the list - for instance, one of the bugs is a memleak in OpenSSH.

I don't use NetBSD but I just donated $20 to the NetBSD Foundation anyway. Thanks for sharing code/patches!