Assuming it's AI slop, considering that there's been an upswing of AI slop CVE reports seems pretty reasonable. However, it doesn't necessarily matter if it's

Assuming it's AI slop, considering that there's been an upswing of AI slop CVE reports seems pretty reasonable. However, it doesn't necessarily matter if it's submitted by an incompetent human, a malicious human, or is AI slop. The end effect of wasting time on a non-vulnerability is the same In a world where generating AI slop is cheap, the standard should probably be that the person submitting a vulnerability needs to prove it is a vulnerability, and probably that they're a person. Having the person receiving it prove it isn't won't scale