Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled

Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for…

In Forgejo before 1.20.5-1, certain endpoints do not check whether an object belongs to a repository for which permissions are being checked

Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication

Forgejo Repository Migration is_migrate_allowed.go net.LookupIP server-side request forgery

Forgejo < 15.0.3 - Stored XSS via Actions Run Full Name Rendering

Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (or another extension) to a URL

Forgejo 13.0.0 through 16.0.4, when "[federation] ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or content…

Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature