Courtney Rosenthal

Stories

Forgejo patches critical RCE affecting versions through 16.0.3

Published a full postmortem of the incident on September 7

Forgejo released version 16.0.4 on September 10 to close a critical remote code execution vulnerability affecting every version through 16.0.3. The news reached Hacker News the same day.

Updated 1 hour ago