I invented a CVE number to test my tool. It was real

I've been building a thing that checks whether the claims in a bug report correspond to anything that...