—
GO-2026-5425
Ironic Standalone Operator's controller modifies user-owned resources without consent in github.com/metal3-io/ironic-standalone-operator
Quick fix
GO-2026-5425 — github.com/metal3-io/ironic-standalone-operator: upgrade to the fixed version with the command below.
go get github.com/metal3-io/ironic-standalone-operator@v0.7.3Details
Ironic Standalone Operator's controller modifies user-owned resources without consent in github.com/metal3-io/ironic-standalone-operator
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/metal3-io/ironic-standalone-operator
Introduced in:
0Fixed in: 0.7.3Fix
go get github.com/metal3-io/ironic-standalone-operator@v0.7.3References
- https://github.com/metal3-io/ironic-standalone-operator/security/advisories/GHSA-hfc8-w5f4-3x6m[ADVISORY]
- https://github.com/metal3-io/ironic-standalone-operator/pull/619[FIX]
- https://github.com/metal3-io/ironic-standalone-operator/pull/664[FIX]
- https://github.com/metal3-io/ironic-standalone-operator/pull/665[FIX]