Comment by cocorebop

> Over the past few days, a newly created GitHub repo (programmervuln/cveadvisory-) published a batch of SQLite vulnerability advisories (as part of other 50+ CVEs which we believe are also LLM slop except from one). NVD quickly flagged these as critical, and CISA's ADP agreed.

These two sentences seem incompatible to me. A brand new actor can just say some stuff and cause major disruptions in this way?