{"action":"Upgrade sigs.k8s.io/aws-load-balancer-controller to 2.8.2 or later.","affected":[{"fixed":"2.8.2","introduced":"2.0.0"}],"component":"sigs.k8s.io/aws-load-balancer-controller","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["2.8.2"],"ghsa_id":"GHSA-rjfv-pjvx-mjgv","id":"tcs_01M5KFMTG4Z0SBM1NJKVR64GVY","modified_at":"2026-09-10T03:50:20.089302405Z","published_at":"2024-10-24T19:04:45Z","references":["https://osv.dev/vulnerability/GHSA-rjfv-pjvx-mjgv","https://github.com/kubernetes-sigs/aws-load-balancer-controller/security/advisories/GHSA-rjfv-pjvx-mjgv","https://aws.amazon.com/security/vulnerability-reporting","https://github.com/kubernetes-sigs/aws-load-balancer-controller","https://github.com/kubernetes-sigs/aws-load-balancer-controller/releases/tag/v2.8.2%C2%A0","https://kubernetes-sigs.github.io/aws-load-balancer-controller/latest/deploy/configurations/#waf-addons","https://kubernetes-sigs.github.io/aws-load-balancer-controller/latest/guide/ingress/annotations/#addons"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-rjfv-pjvx-mjgv","url":"https://osv.dev/vulnerability/GHSA-rjfv-pjvx-mjgv"}],"summary":"AWS Load Balancer Controller automatically detaches externally associated web ACL from Application Load Balancers"}