<p>AI-assisted bug hunting adds to maintainers' workload, while broad CVE rules help explain the sprawling tally</p>