AdvisoriesToolsStatsChecklistSubmitGet the email
← All tools
IDEs & agents · AWS

Amazon Q Developer

AWS coding assistant and VS Code extension.

1Advisories
0critical
1high
0medium
2025-07-23Latest
Timeline · advisories per quarter
12025 Q3
Named in sources

Reported for Amazon Q Developer

01. highSupply chainCVE-2025-8217: malicious code shipped in Amazon Q Developer 1.84.0An over-scoped GitHub token in Amazon Q’s build setup let an attacker commit malicious code that shipped in the VS Code extension 1.84.0. AWS says it failed to run due to a syntax error. Amazon Q Developer 2025-07-23
The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.

Free. The list is new, so the first issues go out once there are readers. Unsubscribe from any email in one click. We never sell or share addresses.