ok, so, first, where did you find that picture of me.
The short version is: <li>Two weeks ago or so MITRE published ~20 CVEs each in SQLite and a schreibfaul1 esp32 audio library that turned out to be based on a false report (<em>cough</em> some "AI" tool & I can proof it!).</li><li>Between 2023 and mid/late June 2026 MITRE added hallucinated product/vendor references in a specific format to their CVEs.</li>
This is a CVE that has both issues - while MITRE fixed that second issue for new CVEs they didn't go back into the CVEs they had in the pipeline...
Longform blogposts, but everything relevant is already covered above:
SQLite: https://blagh.nyanbinary.de/posts/on-those-mitre-sqlite-vulnerabilities/
Reference hallucinations: https://blagh.nyanbinary.de/posts/look-ma-im-a-cve-reference/
nyan
npub1t9…dr0p6
2026-08-09 15:56:30 UTC
in reply to nevent1q…cehg
Author Public Key
npub1t9qkvlgeus9htqvhdh0jp0aw9qpz76ph74r8e9hsudma57azvj3qndr0p6Published at
2026-08-09 15:56:30 UTCEvent JSON
{
"id": "352f12273d257cd785f6b04bb286d7127fa02db32e1bc1c6194f32c9638e859c",
"pubkey": "5941667d19e40b7581976ddf20bfae28022f6837f5467c96f0e377da7ba264a2",
"created_at": 1786290990,
"kind": 1,
"tags": [
[
"e",
"b1996ca225207be12da745ff4cb930500e06ae1dde1d1654d56aa76a26fa24d7",
"",
"root",
"5941667d19e40b7581976ddf20bfae28022f6837f5467c96f0e377da7ba264a2"
],
[
"e",
"752970a91ae7ffbca0c4d73c983ae16bd8e95a35f5bad0af8cc6a6dc07d0517a",
"",
"reply",
"7356e5355255fb9f163ce6ae6c11b4ff489ce265d431d5a9ef7a031b717d7c8a"
],
[
"p",
"5941667d19e40b7581976ddf20bfae28022f6837f5467c96f0e377da7ba264a2"
],
[
"p",
"7356e5355255fb9f163ce6ae6c11b4ff489ce265d431d5a9ef7a031b717d7c8a"
],
[
"proxy",
"https://infosec.exchange/@nyanbinary/117066366323160652",
"web"
],
[
"p",
"3656ded7873b46d10bedd2b302cfc685bf50bbe67a56d6d4fbbd548ffc995295"
],
[
"proxy",
"https://infosec.exchange/users/nyanbinary/statuses/117066366323160652",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/nyanbinary/statuses/117066366323160652",
"pink.momostr"
],
[
"-"
]
],
"content": "ok, so, first, where did you find that picture of me. \n\nThe short version is: \u003cli\u003eTwo weeks ago or so MITRE published ~20 CVEs each in SQLite and a schreibfaul1 esp32 audio library that turned out to be based on a false report (\u003cem\u003ecough\u003c/em\u003e some \"AI\" tool \u0026amp; I can proof it!).\u003c/li\u003e\u003cli\u003eBetween 2023 and mid/late June 2026 MITRE added hallucinated product/vendor references in a specific format to their CVEs.\u003c/li\u003e\n\nThis is a CVE that has both issues - while MITRE fixed that second issue for new CVEs they didn't go back into the CVEs they had in the pipeline...\n\nLongform blogposts, but everything relevant is already covered above:\nSQLite: https://blagh.nyanbinary.de/posts/on-those-mitre-sqlite-vulnerabilities/\nReference hallucinations: https://blagh.nyanbinary.de/posts/look-ma-im-a-cve-reference/",
"sig": "2ddd410e888eae2e357482ff7490bfb021b52fc4be7423b3aca32c7cc7b679f373be0f56292323320cee4e0a337a8f717a34beeaeda09c8956dbea589386b1a2"
}