[forgejo]

September 11, 2026

• Forgejo ≤16.0.3 has a critical RCE, fixed in 16.0.4 (release notes) (discussion). · Vulnerabilities

in Four Hours to First Victim: AI Agents Ran a Global PaperCut Campaign