CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
CVE details

CVE-2026-89094

Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled.

Score
9.9 critical
Published
2026-09-10
Links
NVD · cve.org

Matched ports (2)

PortPackageVersionStatusMaintainer
www/forgejo15forgejo1515.0.10_1fixed by updatedes@FreeBSD.org
www/forgejo16forgejo1616.0.6_1fixed by updatedes@FreeBSD.org