Forgejo <=16.0.3 Critical RCE Vulnerability
ForgejoRCEvulnerabilitysecuritycriticalremote code executionCVEpatch
A critical Remote Code Execution (RCE) vulnerability has been discovered affecting Forgejo versions 16.0.3 and earlier. The vulnerability was reported on Reddit's netsec community, with reference to release notes for version 16.0.4 on Codeberg that presumably addresses this security issue. Users running affected versions are advised to upgrade to version 16.0.4 or later to mitigate this critical security risk.