AI Bug‑Report Floods Break Triage

Automated security‑scanning and AI tools are producing many identical or low‑value vulnerability reports that swamp maintainer workflows, duplicate effort, and slow real fixes. Open projects with volunteer triage teams (like the Linux kernel security team) are vulnerable because reporters using the same tools surface the same issues simultaneously and treat routine bugs as security emergencies. — If unaddressed, AI‑generated report floods could degrade software security by wasting maintainer time, delaying patches, and forcing new norms or technical controls for automated reporting.