Grype reports a high severity vulnerability in image

[jebbens]

Running a scan with grype against the image reveals a high severity vulnerability (GHSA-w32m-9786-jp63) in a go module. Steps to reproduce:

grype registry:public.ecr.aws/eks/aws-load-balancer-controller:v2.11.0

Is this something the team is aware of?

[zac-nixon]

Hi. Yes, we are aware and have fixed it here: e9445ad

It looks like we've forgotten to publish the new image though..

We determined that we're not vulnerable to this, so are waiting until our next release (EOM) to release the fix.

[jebbens]

Great news. End of month as in today?

[wweiwei-li]

we are planning to release it by end of Feb.