Product by Forgejo

    Forgejo

    11 known vulnerabilities in Forgejo (Forgejo), 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Forgejo (Forgejo)
    CriticalCVE-2026-89094

    Forgejo: Improper Neutralization of Special Elements Used in a Template Engine

    		9.9
    CriticalCVE-2023-49946

    Forgejo: security vulnerability

    		9.1
    MediumCVE-2026-119545

    Forgejo through 15.0.11, 16.0.7, and 17.0.1 SSRF via OpenID Discovery

    		5.3
    CriticalCVE-2025-68937

    Forgejo: UNIX Symbolic Link (Symlink) Following

    also in 1 other product

    		—
    MediumCVE-2026-119546

    Forgejo through 15.0.11, 16.0.7, and 17.0.1 Path Traversal via restore-repo

    		5.5
    HighCVE-2023-49947

    Forgejo: security vulnerability

    		7.5
    MediumCVE-2026-119547

    Forgejo through 15.0.11, 16.0.7, and 17.0.1 Information Disclosure via /api/v1/user/keys/{id}

    		4.3
    MediumCVE-2023-49948

    Forgejo: security vulnerability

    		5.3
    MediumCVE-2026-59102

    Forgejo < 15.0.3 - Stored XSS via Actions Run Full Name Rendering

    		5.4
    MediumCVE-2026-90679

    Forgejo: Use of Less Trusted Source

    		4.3
    LowCVE-2026-89151

    Forgejo: Incorrect Authorization

    		3.5

    All products by Forgejo