OpenSSL has a serious vulnerability, called the “Heartbleed Bug”. The OPC UA C++ SDK uses OpenSSL and if you have taken the new HTTPS protocol in use, your applications may be affected.
OpenSSL is not used by the Java or .NET applications, so you will be safe in those environments.
Read the details from the Unified Automation article.