I invented a CVE number to test my tool. It was real
I've been building a thing that checks whether the claims in a bug report correspond to anything that exists. Not whether the report is AI-generated - whether the file it names is in the repository, whether the function is declared, whether the versi