Huh? Is VulnCheck talking about itself? I’ve come across many false CVEs associated with VulnCheck over the past few months, including this one: https://github.com/advisories/GHSA-vfj7-8cjw-p6xm