aidlc-traceability XSS Vulnerability Requires Immediate Update
AWS AI-DLC Workflows' aidlc-traceability tool has a stored XSS flaw (CVE-2026-120497) in its HTML report generator. If someone modifies your project's artifact files with malicious code in titles or descriptions, it'll execute in browsers when users open the generated reports. You need to update to commit 96cf0ea or later (released July 3, 2026) if you're running versions 0.1.0 through the previous build.
source: [aws/security-bulletin]