bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Monday, November 2, 2026

aidlc-traceability XSS Vulnerability Requires Immediate Update

AWS AI-DLC Workflows' aidlc-traceability tool has a stored XSS flaw (CVE-2026-120497) in its HTML report generator. If someone modifies your project's artifact files with malicious code in titles or descriptions, it'll execute in browsers when users open the generated reports. You need to update to commit 96cf0ea or later (released July 3, 2026) if you're running versions 0.1.0 through the previous build.

source: [aws/security-bulletin]