AWS inspector medium security documentation change
Summary
Added entry about CVE-2026-32280 fix in Amazon Inspector SBOM Generator version 1.12.1 and updated malicious package statistics with new counts and recent detections
Security assessment
The change explicitly documents a specific CVE (CVE-2026-32280) that was resolved by upgrading to version 1.12.1, indicating a security vulnerability was addressed. The malicious package statistics updates show ongoing security monitoring activities.
Diff
diff --git a/inspector/latest/user/doc-history.md b/inspector/latest/user/doc-history.md index 17e5f93d0..44647e079 100644 --- a//inspector/latest/user/doc-history.md +++ b//inspector/latest/user/doc-history.md @@ -14,0 +15 @@ Change| Description| Date +[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)| Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate vulnerability findings for CVE-2026-32280. This finding is resolved by upgrading to Amazon Inspector SBOM Generator version 1.12.1. | April 9, 2026 @@ -110 +111 @@ Amazon Inspector continuously monitors and identifies malicious packages from th -**Latest Update:** 2026-02-06 12:00:00 UTC +**Latest Update:** 2026-04-07 12:00:00 UTC @@ -114 +115 @@ Amazon Inspector continuously monitors and identifies malicious packages from th - * **Lifetime Total:** 191,801 malicious packages identified + * **Lifetime Total:** 193,090 malicious packages identified @@ -116 +117 @@ Amazon Inspector continuously monitors and identifies malicious packages from th - * **This Month:** 147 new malicious packages identified + * **This Month:** 81 new malicious packages identified @@ -118 +119 @@ Amazon Inspector continuously monitors and identifies malicious packages from th - * **Last Month:** 527 new malicious packages identified + * **Last Month:** 1,026 new malicious packages identified @@ -120 +121 @@ Amazon Inspector continuously monitors and identifies malicious packages from th - * **This Week:** 147 new malicious packages identified + * **This Week:** 18 new malicious packages identified @@ -122 +123 @@ Amazon Inspector continuously monitors and identifies malicious packages from th - * **Last Week:** 96 new malicious packages identified + * **Last Week:** 85 new malicious packages identified @@ -131,10 +132,10 @@ Package Name | MAL-ID | Detection Date -web3-sinon | MAL-2026-807 | 2026-02-06 -web3-chain-sinon | MAL-2026-806 | 2026-02-06 -aligned-arrays | MAL-2026-805 | 2026-02-06 -breadcrumb-service | MAL-2026-804 | 2026-02-06 -@sbseg-plugin/qbo-web-app-ui | MAL-2026-802 | 2026-02-06 -@rsgweb/utils | MAL-2026-801 | 2026-02-06 -@rsgweb/tina | MAL-2026-800 | 2026-02-06 -@rsgweb/rockstar-account | MAL-2026-799 | 2026-02-06 -@rsgweb/modules-core-www-page | MAL-2026-798 | 2026-02-06 -@rsgweb/modules-core-feedback | MAL-2026-797 | 2026-02-06 +totally-safe-util | MAL-2026-2500 | 2026-04-06 +nerite-security-audit | MAL-2026-2499 | 2026-04-06 +df-sandbox-test | MAL-2026-2498 | 2026-04-06 +commerce-utils | MAL-2026-2497 | 2026-04-06 +chess-sec-ssrf1 | MAL-2026-2496 | 2026-04-06 +cloudera | MAL-2026-2495 | 2026-04-05 +cloudera-poc | MAL-2026-2493 | 2026-04-05 +admin0911 | MAL-2026-2492 | 2026-04-05 +@not-nemo/crypto-tracker | MAL-2026-2491 | 2026-04-05 +strapi-plugin-sitemap-gen | MAL-2026-2484 | 2026-04-03