burrito vulnerabilities

1 known vulnerability in burrito from Padok-team. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  burrito: Missing Authentication for Critical Functionality

  CVE-2026-102649Oct 26, 2026Padok-team

  Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator. Prior to 0.13.0, `POST /api/webhook` accepts unsigned GitHub and GitLab events when a `TerraformRepository`'s credentials omit `webhookSecret` or set it to an empty value, in