AWS inspector: Inspector SBOM Generator false-positive finding for CVE-2026-85747
Summary
Adds a doc-history entry noting that the Amazon Inspector SBOM Generator may report a finding for CVE-2026-85747, that the generator is not actually impacted, and that customers can ignore or suppress it until the next release.
Security assessment
The entry explicitly references a specific CVE and a false-positive vulnerability finding, giving customers guidance to ignore or suppress it. It is a concrete advisory tied to a named vulnerability, though it states the tool is not impacted, so impact is limited to finding noise rather than an exploitable flaw.
Evidence
+[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)| Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate a vulnerability finding for CVE-2026-85747. It was confirmed that the Amazon Inspector SBOM Generator is not impacted by this vulnerability. This finding will be resolved in the next release of the Amazon Inspector SBOM Generator. In the mean time, customers may safely ignore or suppress this vulnerability. | October 16, 2026
Diff
diff --git a/inspector/latest/user/doc-history.md b/inspector/latest/user/doc-history.md index 3496661..67868a7 100644 --- a//inspector/latest/user/doc-history.md +++ b//inspector/latest/user/doc-history.md @@ -16,0 +17 @@ Change| Description| Date +[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)| Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate a vulnerability finding for CVE-2026-85747. It was confirmed that the Amazon Inspector SBOM Generator is not impacted by this vulnerability. This finding will be resolved in the next release of the Amazon Inspector SBOM Generator. In the mean time, customers may safely ignore or suppress this vulnerability. | October 16, 2026