Spurious CVEs have been around for a long time, it seems that people feeding open source codebases into LLMs and asking it to point out potential issues is just

Spurious CVEs have been around for a long time, it seems that people feeding open source codebases into LLMs and asking it to point out potential issues is just the next step in that approach. LLMs don't understand the code they're being fed, and it seems the people feeding the LLMs don't understand it either...