{"id":"GHSA-gjmq-52p3-7fh2","kind":"vulnerability","aliases":["GHSA-gjmq-52p3-7fh2"],"related":[],"title":"CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows","description":"CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows\n\n### CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows\n\nBulletin ID: 2026-163-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/02/2026 11:00 AM PST\n\nDescription:\n\naidlc-traceability is an open source command-line tool, formerly published in the awslabs/aidlc-workflows repository, that generates traceability-matrix reports from a project's AI-DLC artifact files. We identified CVE-2026-120497, where stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI could allow an actor who can modify a project's AI-DLC artifact files to execute arbitrary script in the browser of a user who opens a generated HTML traceability report via crafted artifact titles or descriptions.\n\nImpacted versions: >=0.1.0 AND <commit 96cf0ea (fixed 2026-07-03)\n\nResolution:\n\nThis issue has been addressed in aidlc-traceability at commit 96cf0ea (2026-07-03). The CLI was subsequently removed from the awslabs/aidlc-workflows repository on 2026-07-16 and is no longer maintained there; an agent-native re-implementation is maintained separately at aws-samples/sample-aidlc-traceability. We recommend removing any local copy of the aidlc-traceability CLI obtained before 2026-07-03, or updating it to commit 96cf0ea or later, and ensuring any forked or derivative code incorporates the fix.\n\nWorkarounds:\n\nDo not open HTML reports generated by an unpatched copy of the tool from untrusted projects. Use the Markdown report output instead of HTML, or regenerate reports only from artifact files you control, until the local copy is updated or removed.\n\nReferences:\n\n- CVE-2026-120497\n- GHSA-gjmq-52p3-7fh2\n\nAcknowledgement:\n\nWe would like to thank Vignesh Kumar for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","summary":"The aidlc-traceability command-line tool's HTML report generator does not sanitize artifact titles and descriptions, so crafted text in project artifact files can run script in the browser of anyone who opens the generated report. An attacker who can edit a project's AI-DLC artifact files can run script in a reviewer's browser.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aidlc-traceability","aws","aws-ai-dlc","html-reports","lab-disclosure","package"],"not_affected_if":["markdown-output-only","own-artifacts-only","patched-commit"],"how_to_check":"- Check whether a local copy of the aidlc-traceability CLI exists and its commit: `git -C <path> rev-parse HEAD` compared with 96cf0ea\n- Check whether generated HTML traceability reports are opened from untrusted projects","fix":"- aidlc-traceability: commit `96cf0ea` (2026-07-03) or later; the CLI is no longer maintained in awslabs/aidlc-workflows, and its replacement is aws-samples/sample-aidlc-traceability\n- Remove copies obtained before 2026-07-03 if not updated","status":"open","published_at":null,"first_seen_at":"2026-11-02T19:43:52+00:00","triaged_at":"2026-11-02T19:45:17+00:00","updated_at":"2026-11-02T19:45:17+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-11-02T19:45:17Z","model":"claude-haiku-5-5","output":{"fix":"- aidlc-traceability: commit `96cf0ea` (2026-07-03) or later; the CLI is no longer maintained in awslabs/aidlc-workflows, and its replacement is aws-samples/sample-aidlc-traceability\n- Remove copies obtained before 2026-07-03 if not updated","reach":"local","title":"aidlc-traceability: stored XSS in HTML traceability report generator","impact":"medium","summary":"The aidlc-traceability command-line tool's HTML report generator does not sanitize artifact titles and descriptions, so crafted text in project artifact files can run script in the browser of anyone who opens the generated report. An attacker who can edit a project's AI-DLC artifact files can run script in a reviewer's browser.","audience":"developers","category":"package","nicknames":[],"who_cares":["aidlc-traceability","aws-ai-dlc","html-reports"],"confidence":0.8,"fix_status":"available","needs_auth":"yes","worst_case":"script runs in the browser of a user opening the report","analyst_note":"","how_to_check":"- Check whether a local copy of the aidlc-traceability CLI exists and its commit: `git -C <path> rev-parse HEAD` compared with 96cf0ea\n- Check whether generated HTML traceability reports are opened from untrusted projects\n- unknown for any other check the sources do not describe","plain_action":"","needs_analyst":false,"not_affected_if":["markdown-output-only","own-artifacts-only","patched-commit"],"who_is_affected":"Teams that run the aidlc-traceability CLI from a copy or fork built before commit 96cf0ea (2026-07-03) and open the HTML reports it generates. Exposure requires that artifact files come from someone outside the team or that the reports are opened from untrusted projects; teams using only Markdown output or regenerating reports from their own artifacts are less exposed.","user_interaction":"yes","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000835,"input_tokens":4902,"output_tokens":690,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-03':277C,293C,344C '-07':276C,292C,305C,343C '-120497':3A,111C,134C,211C,408C '-16':306C '-163':158C '-2026':2A,110C,133C,210C,407C '/sample-aidlc-traceability':327C '0.1.0':270C '00':171C '11':170C '11/02/2026':169C '2026':157C,275C,291C,304C,342C '52p3':27A,32A,412C '7fh2':28A,33A,413C '96cf0ea':273C,290C,350C 'acknowledg':414C 'actor':233C 'address':283C 'agent':315C 'agent-n':314C 'ai':21A,40B,97B,129C,152C,203C,241C 'ai-dlc':20A,96B,128C,151C,202C,240C 'aidlc':16A,35B,51B,124C,147C,176C,227C,286C,337C 'aidlc-trac':15A,34B,50B,123C,146C,175C,226C,285C,336C 'allow':231C 'anyon':82B 'arbitrari':247C 'artifact':64B,73B,99B,205C,243C,264C,393C 'attack':89B 'attent':166C 'aw':19A,37B,39B,127C,150C,159C,161C,325C 'aws-ai-dlc':38B 'aws-sampl':324C 'aws-security@amazon.com':435C 'awslabs/aidlc-workflows':190C,301C 'browser':80B,108B,251C 'bulletin':155C 'cli':229C,295C,339C 'code':359C 'collabor':423C 'command':54B,183C 'command-lin':53B,182C 'commit':272C,289C,349C 'concern':441C 'content':162C 'control':396C 'coordin':429C 'copi':333C,373C,400C 'could':230C 'craft':69B,263C 'cross':6A,114C,137C,215C 'cross-sit':5A,113C,136C,214C 'cve':1A,109C,132C,209C,406C 'date':168C 'deriv':358C 'descript':67B,174C,267C 'disclosur':47B,431C 'dlc':22A,41B,98B,130C,153C,204C,242C 'edit':92B 'email':434C 'ensur':354C 'execut':246C 'file':74B,100B,206C,244C,394C 'fix':274C,362C 'fork':356C 'former':186C 'generat':13A,60B,86B,121C,144C,193C,223C,258C,369C 'ghsa':25A,30A,410C 'ghsa-gjmq-52p3-7fh2':24A,29A,409C 'gjmq':26A,31A,411C 'html':11A,43B,58B,119C,142C,221C,259C,367C,387C 'html-report':42B 'id':156C 'identifi':208C 'impact':268C 'implement':319C 'import':164C 'incorpor':360C 'instead':385C 'issu':280C,426C 'kumar':421C 'lab':46B 'lab-disclosur':45B 'later':352C 'like':417C 'line':55B,184C 'local':332C,399C 'longer':310C 'maintain':311C,321C 'markdown':382C 'matrix':196C 'modifi':236C 'nativ':316C 'obtain':340C 'open':84B,180C,256C,366C 'output':384C 'packag':48B 'pleas':433C 'process':432C 'project':72B,94B,200C,238C,379C 'pst':173C 'public':167C 'publish':187C 'question':439C 're':318C 're-implement':317C 'recommend':329C 'refer':405C 'regener':389C 'remov':298C,330C,404C 'report':12A,44B,59B,87B,120C,143C,197C,222C,261C,368C,383C,390C 'repositori':191C,302C 'requir':165C 'resolut':278C 'review':106B 'run':76B,102B 'sampl':326C 'sanit':63B 'scope':160C 'script':8A,77B,103B,116C,139C,217C,248C 'secur':438C 'separ':322C 'site':7A,115C,138C,216C 'sourc':181C 'store':4A,112C,135C,213C 'subsequ':297C 'text':70B 'thank':419C 'titl':65B,265C 'tool':56B,185C,376C 'traceability-matrix':194C 'traceabl':17A,36B,52B,125C,148C,177C,195C,228C,260C,287C,338C 'type':163C 'unpatch':372C 'untrust':378C 'updat':346C,402C 'use':380C 'user':254C 'version':269C 'via':262C 'vignesh':420C 'vulner':430C 'workaround':363C 'workflow':23A,131C,154C 'would':416C 'xss':218C","nicknames":[],"mitigations":[],"who_affected":"Teams that run the aidlc-traceability CLI from a copy or fork built before commit 96cf0ea (2026-07-03) and open the HTML reports it generates. Exposure requires that artifact files come from someone outside the team or that the reports are opened from untrusted projects; teams using only Markdown output or regenerating reports from their own artifacts are less exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aidlctraceability","aws","awsaidlc","htmlreports","labdisclosure","medium","package"],"first_public_at":null,"kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"lab","external_id":"https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/#GHSA-gjmq-52p3-7fh2","url":"https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-02T19:43:52+00:00","fetched_at":"2026-11-02T19:43:52+00:00","note":"AWS: CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows"}],"documents":[{"id":53588,"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-163-aws/","title":"AWS: CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows","kind":"advisory","source":"lab","publisher":"research","text":"CVE-2026-120497 Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows\n\n### CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows\n\nBulletin ID: 2026-163-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 11/02/2026 11:00 AM PST\n\nDescription:\n\naidlc-traceability is an open source command-line tool, formerly published in the awslabs/aidlc-workflows repository, that generates traceability-matrix reports from a project's AI-DLC artifact files. We identified CVE-2026-120497, where stored cross-site scripting (XSS) in the HTML report generator in the aidlc-traceability CLI could allow an actor who can modify a project's AI-DLC artifact files to execute arbitrary script in the browser of a user who opens a generated HTML traceability report via crafted artifact titles or descriptions.\n\nImpacted versions: >=0.1.0 AND <commit 96cf0ea (fixed 2026-07-03)\n\nResolution:\n\nThis issue has been addressed in aidlc-traceability at commit 96cf0ea (2026-07-03). The CLI was subsequently removed from the awslabs/aidlc-workflows repository on 2026-07-16 and is no longer maintained there; an agent-native re-implementation is maintained separately at aws-samples/sample-aidlc-traceability. We recommend removing any local copy of the aidlc-traceability CLI obtained before 2026-07-03, or updating it to commit 96cf0ea or later, and ensuring any forked or derivative code incorporates the fix.\n\nWorkarounds:\n\nDo not open HTML reports generated by an unpatched copy of the tool from untrusted projects. Use the Markdown report output instead of HTML, or regenerate reports only from artifact files you control, until the local copy is updated or removed.\n\nReferences:\n\n- CVE-2026-120497\n- GHSA-gjmq-52p3-7fh2\n\nAcknowledgement:\n\nWe would like to thank Vignesh Kumar for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}