AWS inspector: Doc history: SBOM Generator CVE-2026-111943 known issue
Summary
Adds two doc-history entries: one noting a known scenario where the Amazon Inspector SBOM Generator may generate a vulnerability finding for CVE-2026-111943 (to be resolved in the next release), and one announcing the new default Amazon ECR re-scan duration of 7 days.
Security assessment
The entry explicitly references a specific CVE (CVE-2026-111943) and discloses a known issue in the Amazon Inspector SBOM Generator that can produce a spurious vulnerability finding, with a fix promised in the next release. This is concrete vulnerability/known-issue disclosure tied to a scanner, though it describes a false-positive reporting issue rather than an exploitable flaw.
Evidence
+[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)| Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate a vulnerability finding for CVE-2026-111943. This finding will be resolved in the next release. | October 21, 2026
Diff
diff --git a/inspector/latest/user/doc-history.md b/inspector/latest/user/doc-history.md index 81c2a20..3aebbb6 100644 --- a//inspector/latest/user/doc-history.md +++ b//inspector/latest/user/doc-history.md @@ -16,0 +17,2 @@ Change| Description| Date +[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)| Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate a vulnerability finding for CVE-2026-111943. This finding will be resolved in the next release. | October 21, 2026 +[Updated default Amazon ECR re-scan duration](./doc-history.html)| Amazon Inspector now uses a default Amazon ECR re-scan duration of 7 days when you activate Amazon ECR scanning. For more information about configuring the Amazon ECR re-scan duration, see [Configuring the Amazon ECR re-scan duration](https://docs.aws.amazon.com/inspector/latest/user/scanning_resources_configure_duration_setting_ecr.html). | October 21, 2026