JFrog: Six SQLite CVEs Flagged Critical by NVD Are AI-Generated Noise

JFrog compiled three SQLite versions in isolated containers with AddressSanitizer, a memory error detector, and ran each disputed advisory's proof-of-concept. No claimed use-after-free bug was reproduced. The CVEs had received severity scores of 7.5–10.0 from NVD and spread through CISA's feeds. Worth flagging: the CVE pipeline assigns scores before any source-level verification occurs.