GO-2024-3212 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller-fips, aws-load-balancer-controller...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: nova-fips, stakater-reloader, victoriametrics, pgwatch, podinfo, flux-notification-controller, cluster-autoscaler-fips, flux-image-automation-controller, librechat, flux-source-watcher, aws-load-balancer-controller-fips, flux-fips, victorialogs, metacontroller, dkron...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: runc, wuzz, fuse-overlayfs-snapshotter, k3s, gitness, k8s-device-plugin, aws-load-balancer-controller...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: runc, wuzz, fuse-overlayfs-snapshotter, k3s, gitness, k8s-device-plugin, aws-load-balancer-controller...

GO-2024-3212 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller...

Improper Isolation or Compartmentalization

Overview Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization via incorrect ordering in the listener-rule generation process. An attacker can intercept, spoof, or deny traffic intended for another namespace by crafting a malicious HTTPRoute resource on a...

CVE-2026-15738

Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource. To mitigate this...

CVE-2026-15738 Cross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer Controller

Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource. To mitigate this...

CVE-2026-15738

The CVE-2026-15738 issue affects the AWS Load Balancer Controller prior to version 3.4.2, where incorrect behavior order in Gateway API listener-rule generation can let an authenticated remote user intercept, spoof, or deny another namespace’s gRPC traffic on a shared Gateway via a crafted HTTPRo...

CVE-2026-15738: Improper Isolation or Compartmentalization

Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource. To mitigate this...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: mongo-tools, nri-discovery-kubernetes, conftest-fips, amazon-k8s-cni, db-operator, terraform-provider-azapi, kubecolor, packer, cluster-api-aws-controller, opentelemetry-collector, yace, docker-cli-buildx, authservice, k8sgpt, gatus, grafana-pyroscope,...

GHSA-62JJ-GR2R-5C34 vulnerabilities

Vulnerabilities for packages: mongo-tools, clickhouse-operator, metrics-server-fips, nri-discovery-kubernetes, pvc-autoresizer, cloudprober, amazon-k8s-cni, terraform-provider-azapi, kubecolor, yace, docker-cli-buildx, authservice, k8sgpt, gatus, grafana-pyroscope, openbao-k8s, cilium-envoy-fips,...

GHSA-W32M-9786-JP63 vulnerabilities

Vulnerabilities for packages: go-discover, cloud-provider-aws, dbmate, spire-server, dive, containerd, step-issuer, policy-controller, lvm-driver, nfs-subdir-external-provisioner, zot, kubernetes-csi-driver-hostpath, kbld, aactl, local-path-provisioner, crossplane-provider-azure, gptscript,...

GO-2024-3212 AWS Load Balancer Controller automatically detaches externally associated web ACL from Application Load Balancers in sigs.k8s.io/aws-load-balancer-controller

AWS Load Balancer Controller automatically detaches externally associated web ACL from Application Load Balancers in sigs.k8s.io/aws-load-balancer-controller. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module...

GHSA-RJFV-PJVX-MJGV AWS Load Balancer Controller automatically detaches externally associated web ACL from Application Load Balancers

Summary The AWS Load Balancer Controller includes an optional, default-enabled feature that manages WAF WebACLs on Application Load Balancers ALBs on your behalf. In versions 2.8.1 and earlier, if the WebACL annotation 1 alb.ingress.kubernetes.io/wafv2-acl-arn or...

AWS Load Balancer Controller automatically detaches externally associated web ACL from Application Load Balancers

Summary The AWS Load Balancer Controller includes an optional, default-enabled feature that manages WAF WebACLs on Application Load Balancers ALBs on your behalf. In versions 2.8.1 and earlier, if the WebACL annotation 1 alb.ingress.kubernetes.io/wafv2-acl-arn or...

Important: Red Hat Enhancement Advisory: Release of AWS Load Balancer Operator 1.0.1 on OperatorHub

Release of AWS Load Balancer Operator 1.0.1 Release of OpenShift AWS Load Balancer Operator 1.0.1...

Important: Red Hat Enhancement Advisory: Release of AWS Load Balancer Operator 1.1.z on OperatorHub

Release of AWS Load Balancer Operator 1.1.z Release of OpenShift AWS Load Balancer Operator 1.1.z...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: prometheus-mysqld-exporter, kpt, azure-aad-pod-identity-mic, metrics-server-fips, dive, flux-notification-controller, prometheus-adapter, atlantis-fips, pulumi-language-dotnet, node-problem-detector, configmap-reload-fips, apko, k8sgpt, crossplane-provider-azure,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: prometheus-mysqld-exporter, kpt, azure-aad-pod-identity-mic, metrics-server-fips, dive, flux-notification-controller, prometheus-adapter, atlantis-fips, pulumi-language-dotnet, node-problem-detector, configmap-reload-fips, apko, k8sgpt, crossplane-provider-azure,...