Forgejo Headlines

LWN.net

Forgejo announced the release of versions 16.0.4 and 15.0.8, which fix two security vulnerabilities, including a critical remote-code-execution flaw exploitable through malicious template repositories when generating a new repository. The project urges users to upgrade as soon as possible.

Companies:Forgejo

Fedora Community Blog

Fedora's Forge team completed a presentation on Forgejo migration, deployed Forgejo 15.0.3, and enhanced runner infrastructure.

Companies:Forgejo

Fedora Community Blog

A guide from the Fedora Forge team on onboarding a Forgejo-hosted project to Fedora Konflux, detailing steps for tenant setup, secrets, and pipelines.

Companies:Forgejo

DEV Community

The article argues that Forgejo is a superior self-hosted Git solution for privacy and security compared to centralized platforms like GitHub, detailing its features and risk mitigation.

Companies:Forgejo

byteiota

Another analysis of the Gitea CVE-2026-27771 vulnerability, confirming that Forgejo shares the same flawed container registry implementation and is also vulnerable.

Companies:Forgejo

ProbablyPwned

ProbablyPwned covers the Gitea vulnerability CVE-2026-27771, explaining the impact on 30,000 deployments and providing remediation steps.

Companies:GiteaForgejo

gblock.app

A vulnerability in Gitea and Forgejo exposed private container images for four years, impacting many organizations.

Companies:Forgejo

GBHackers

A critical vulnerability in Gitea and Forgejo's container registry allowed unauthenticated access to private images.

Companies:Forgejo

TechTimes

A critical vulnerability in Gitea and Forgejo exposed private container images for four years, affecting over 30,000 deployments.

Companies:GiteaForgejo

NoScope

A critical vulnerability in Gitea's container registry allowed unauthenticated access to private container images for 4 years, affecting over 30,000 instances across healthcare, aerospace, and critical infrastructure.

Companies:GiteaForgejo

Interoperable Europe Portal

The Dutch government launched a Forgejo-based code platform to enhance digital sovereignty.

Companies:Forgejo

EU Digital Law

The Netherlands launched code.overheid.nl, a self-hosted Forgejo instance for government code.

Companies:Forgejo

byteiota

The Netherlands launched a Forgejo-based code platform to replace GitHub, driven by digital sovereignty.

Companies:Forgejo

DEV Community

A developer blog post details the Dutch government's move to self-hosted Forgejo, discussing the evaluation process and implications for digital sovereignty.

Companies:Forgejo

It's FOSS

The Netherlands soft-launched code.overheid.nl, a self-hosted Forgejo instance for government code hosting, in a move towards digital sovereignty.

Companies:Forgejo

YOOTA

A security researcher claims to have found critical vulnerabilities including an RCE chain in Forgejo.

Companies:Forgejo

TechFlowDaily

The Dutch government soft-launched a self-hosted code platform using Forgejo to support digital sovereignty.

Companies:Forgejo

ITdaily

The Dutch government builds code.overheid.nl on Forgejo to achieve digital sovereignty, as reported by ITdaily.

Companies:Forgejo

Digital Government

The Dutch government launched code.overheid.nl, a self-hosted code platform using Forgejo to promote digital sovereignty.

Companies:Forgejo

Linuxiac

Forgejo 15.0 released as a major update with OIDC support, ephemeral runners, and enhanced security.

Companies:Forgejo

Forgejo

Forgejo v15.0, the lightweight community-developed self-hosted platform for code collaboration, was released on April 16, 2026 as the 100th release of Forgejo. It introduces repo-scoped API tokens, OpenID Connect for Actions, reusable workflow expansion, and ephemeral runner support.

Companies:Forgejo

Fedora Community Blog

The Fedora Community Linux Engineering team announced that Fedora Forge, powered by Forgejo, will replace pagure.io as the project's primary code hosting platform, with the final cutover planned for Flock to Fedora 2026.

Companies:Forgejo