Post #4353643
2026-08-03 11:53 UTC
AI Slop CVEs may be worse than the slopsploits we see being slung across the internet.
JFrog audited 55 advisories from 1 new GH acct. 54 were fabricated. The SQLite ones cite UAFs in functions that didn't exist, line numbers past EOF, & PoCs that die at the parser. NVD scored several 9.8 Critical anyway. 🤷🏽♀️
Since NVD paused deep analysis in 2024, nothing in the pipeline requires a repro. Plausible prose is enough to reach your scanner.
https://research.jfrog.com/post/sqlite-critical-cves-or-llm-slops/
Replies (2)
-
@hrbrmstr@mastodon.social 2026-08-03 11:56
The offending repo: https://github.com/programmervuln/cveadvisory- Looks like some daft clueless moron playing with a loaded AI handgun.
-
@hrbrmstr@mastodon.social 2026-08-03 12:03
I also REALLY WISH EVERYONE BUT ESPECIALLY CYBER RESEARCH ORGS WOULD STOP USING AI SLOP IMAGES IN THEIR POSTS. I almost didn't link to JFrog's post due to their lazy use of such garbage.