Now it's PostgreSQL's turn to have a bogus CVE
opensourcewatch.beehiiv.com
PostgreSQL and cURL aren't the only ones. Someone is faking security alerts for numerous open-source projects.