aidlc-traceability vulnerabilities

CVEs whose affected-version data names the aidlc-traceability package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120497Medium· 5.0PoC

3d ago

Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

Stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI in AWS AI-DLC Workflows before 2026-07-03 might allow an actor who can modify a project's AI-DLC artifact files to execute arbitrary script in t…

▾ TwilightAWS · aidlc-traceabilityEPSS 0.25%via CVEORG