CVE Allocation: Why AI Models Should Be Excluded