AWS inspector: Inspector SBOM Generator CVE-2026-85747 advisory entry
Summary
Adds a documentation history entry noting that the Amazon Inspector SBOM Generator may emit a vulnerability finding for CVE-2026-85747, confirms the generator is not impacted, and states the finding is resolved by upgrading to version 1.17.2 or later.
Security assessment
The added line explicitly references a specific CVE and a remediation version, making this a concrete vulnerability advisory (even though it states the tool is not impacted). Per the rubric, a referenced/fixed CVE maps to high severity.
Evidence
+[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)| Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate a vulnerability finding for CVE-2026-85747. It was confirmed that the Amazon Inspector SBOM Generator is not impacted by this vulnerability. This finding is resolved by upgrading the Amazon Inspector SBOM Generator to version 1.17.2 or later. | October 19, 2026
Diff
diff --git a/inspector/latest/user/doc-history.md b/inspector/latest/user/doc-history.md index 67868a7..81c2a20 100644 --- a//inspector/latest/user/doc-history.md +++ b//inspector/latest/user/doc-history.md @@ -16,0 +17 @@ Change| Description| Date +[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)| Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate a vulnerability finding for CVE-2026-85747. It was confirmed that the Amazon Inspector SBOM Generator is not impacted by this vulnerability. This finding is resolved by upgrading the Amazon Inspector SBOM Generator to version 1.17.2 or later. | October 19, 2026