Well, NVD publishing slop doesn't make things easier: https://research.jfrog.com/post/sqlite-critical-cves-or-llm-slops/