CVEs are on pace for a record year — overall disclosure is climbing to new highs. But the increased use of LLMs to find vulnerabilities has not (yet) produced the explosive growth the aggressive forecasts predicted: the surge is real, just far short of the flood.