Parser and preprocessor pitfalls in code analysis

A fabrication checker cleared an invented CVE because it asked the wrong question

CVE-2026-45871 was made up for a test and turned out to exist. The check resolved it against a global namespace rather than against the project it was meant to defend.