CVE-2026-120497

Vendor

AWS

Product

aidlc-traceability

CVSS v3.1

5.0 AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness

CWE-79

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 29
   AWS bulletin AWS 18h ago

   CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

   Bulletin ID: 2026-163-AWS Publication Date: 11/02/2026 11:00 AM PST Description: aidlc-traceability is an open source command-line tool, formerly published in the awslabs/aidlc-workflows repository, that generates…

   CVE-2026-120497 Amazon Web Services
2. 18
   CVE NVD 18h ago

   Stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI in AWS AI-DLC Workflows before 2026-07-03 might allow an…

   Stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI in AWS AI-DLC Workflows before 2026-07-03 might allow an actor who can modify a project's AI-DLC artifact files to execute arbitrary…

   CVSS 5.0 CVE-2026-120497 AWS