Go/sigs.k8s.io/aws-load-balancer-controller: low

AWS Load Balancer Controller automatically detaches externally associated web ACL from Application Load Balancers

Action: Upgrade sigs.k8s.io/aws-load-balancer-controller to 2.8.2 or later.

go get sigs.k8s.io/aws-load-balancer-controller@v2.8.2

Affected

Fixed versions

Sources

• osv: GHSA-rjfv-pjvx-mjgv
• https://github.com/kubernetes-sigs/aws-load-balancer-controller/security/advisories/GHSA-rjfv-pjvx-mjgv
• https://aws.amazon.com/security/vulnerability-reporting
• https://github.com/kubernetes-sigs/aws-load-balancer-controller
• https://github.com/kubernetes-sigs/aws-load-balancer-controller/releases/tag/v2.8.2%C2%A0
• https://kubernetes-sigs.github.io/aws-load-balancer-controller/latest/deploy/configurations/#waf-addons
• https://kubernetes-sigs.github.io/aws-load-balancer-controller/latest/guide/ingress/annotations/#addons

published 2024-10-24T19:04:45Z · modified 2026-09-10T03:50:20.089302405Z · JSON