It’s becoming cheaper to create convincing vulnerability reports, and that’s increasing the consequences for software maintainers and security teams. Six Common Vulnerabilities and Exposures (CVEs) were published against SQLite in July 2026, and two of them received a severity score of 9.8. The reports seemed legitimate, describing memory-safety bugs and including technical explanations and proof-of-concept code. But JFrog’s researchers discovered that some of the functions these reports…