AdvisoriesToolsStatsChecklistSubmitGet the email
← All tools
IDEs & agents · AWS

Amazon Q Developer

AWS coding assistant and VS Code extension.

1Advisories
0critical
1high
0medium
2025-07-23Latest
Timeline · advisories per quarter
12025 Q3
Named in sources

Reported for Amazon Q Developer

01. highSupply chainCVE-2025-8217: malicious code shipped in Amazon Q Developer 1.84.0An over-scoped GitHub token in Amazon Q’s build setup let an attacker commit malicious code that shipped in the VS Code extension 1.84.0. AWS says it failed to run due to a syntax error. Amazon Q Developer 2025-07-23
The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.