AWS inspector: Changelog note on SBOM Generator CVE findings and upgrade
Summary
Added a documentation-history entry stating Amazon Inspector SBOM Generator may report findings for twelve CVEs (CVE-2026-56866, CVE-2026-78659, CVE-2026-78660, CVE-2026-78663, CVE-2026-78667, CVE-2026-78669, CVE-2026-94439, CVE-2026-94440, CVE-2026-94448, CVE-2026-97030, CVE-2026-97031, CVE-2026-97032), that the tool is not impacted by them, and that findings clear on upgrade to version 1.17.1+; also removed the earlier machine image scanning changelog entry.
Security assessment
The entry explicitly enumerates twelve CVEs and directs users to remediate the associated (spurious) vulnerability findings by upgrading the SBOM Generator to 1.17.1 or later, making it vulnerability/scanning-accuracy guidance with a concrete remediation version rather than a code or auth fix.
Evidence
+[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)| Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate vulnerability findings for CVE-2026-56866, CVE-2026-78659, CVE-2026-78660, CVE-2026-78663, CVE-2026-78667, CVE-2026-78669, CVE-2026-94439, CVE-2026-94440, CVE-2026-94448, CVE-2026-97030, CVE-2026-97031, and CVE-2026-97032. It was confirmed that the Amazon Inspector SBOM Generator is not impacted by these vulnerabilities. These findings are resolved by upgrading the Amazon Inspector SBOM Generator to version 1.17.1 or later. | October 9, 2026
Diff
diff --git a/inspector/latest/user/doc-history.md b/inspector/latest/user/doc-history.md index 948332d..3496661 100644 --- a//inspector/latest/user/doc-history.md +++ b//inspector/latest/user/doc-history.md @@ -16,0 +17 @@ Change| Description| Date +[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)| Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate vulnerability findings for CVE-2026-56866, CVE-2026-78659, CVE-2026-78660, CVE-2026-78663, CVE-2026-78667, CVE-2026-78669, CVE-2026-94439, CVE-2026-94440, CVE-2026-94448, CVE-2026-97030, CVE-2026-97031, and CVE-2026-97032. It was confirmed that the Amazon Inspector SBOM Generator is not impacted by these vulnerabilities. These findings are resolved by upgrading the Amazon Inspector SBOM Generator to version 1.17.1 or later. | October 9, 2026 @@ -19 +19,0 @@ Change| Description| Date -[Amazon Inspector adds support for scanning machine images](./doc-history.html)| Amazon Inspector can now continuously scan the machine images (AMIs) that your account owns for operating system and programming language package vulnerabilities. You control which machine images are in scope by using scan eligibility windows, a scan mode, and exclusion options for copied and backup images. For more information, see [Scanning machine images with Amazon Inspector](https://docs.aws.amazon.com/inspector/latest/user/scanning-machine-images.html) and [Configuring machine image scanning](https://docs.aws.amazon.com/inspector/latest/user/machine-image-scan-configuration.html). | September 8, 2026