{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"sigs.k8s.io/aws-load-balancer-controller","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rjfv-pjvx-mjgv","id":"tcs_01M5KG5PDXR1NJE4RCKN4G494Y","modified_at":"2026-06-19T12:44:19.368023278Z","published_at":"2024-10-28T15:20:02Z","references":["https://osv.dev/vulnerability/GO-2024-3212","https://github.com/kubernetes-sigs/aws-load-balancer-controller/security/advisories/GHSA-rjfv-pjvx-mjgv","https://aws.amazon.com/security/vulnerability-reporting","https://kubernetes-sigs.github.io/aws-load-balancer-controller/latest/deploy/configurations/#waf-addons","https://kubernetes-sigs.github.io/aws-load-balancer-controller/latest/guide/ingress/annotations/#addons"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3212","url":"https://osv.dev/vulnerability/GO-2024-3212"}],"summary":"AWS Load Balancer Controller automatically detaches externally associated web ACL from Application Load Balancers in sigs.k8s.io/aws-load-balancer-controller"}