Increase in AI generated "vulnerability reports" and CVE requests

[Paul Spooren]

Hi,

over the last days I’m witnessing an increased number of security reports on our contact@ mail address. While I very much appreciate anyone improving the security of OpenWrt, this becomes a bit more tedious with the number of AI slop sent to us.

I’m writing this mostly because those “security researchers” start filing (unconfirmed) CVEs and use disorienting email subjections on mailing list. The OpenWrt team is dedicated to resolve and annouce security issues, please don’t get distracted by any false information.

Please have a nice day,
Paul