1 source · latest 2h

CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

AI SECURITYCVE-2026-120497redteam/daily · 1 source

Severity: Medium
Highest CVSS: 4.6
Exploited: Not known
Sources: 1

What happened

Writing the summary… Our AI is reading all the sources now; it appears here in a few seconds.

From 1 source · Wrong?

What to do

No action needed: this one is for your information.

General advice for this kind of story

Read the full story at the source

Vulnerabilities

CVE-2026-120497CVSS 4.6Stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI in AWS AI-DLC Workflows before 2026-07-03 might allow an actor who can modify a project's AI-DLC artifact files to execute arbitrary script in the browser of a user who opens a generated HTML traceability re

Full story timeline · 2 updates

Who reported · 1 outlet

AWS Security Bulletins

Report a problem