CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/forgejo 16

Compact self-hosted Git forge

Port info

Maintainer
des@FreeBSD.org
Packages
latest: 16
Upstream
up to date
Last update
to 16 · 0dfbb738da
Quarterly
2026Q4: 16
WWW
https://forgejo.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install forgejo
installs 16 from latest; from quarterly (2026Q4) 16
Port
# cd /usr/ports/www/forgejo && make install clean
Size
1.2 KiB download · 243 B installed
Depends on
www/forgejo16 16.0.6_1
License
NA

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161616–
FreeBSD 151616–
FreeBSD 14161616

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151616–
FreeBSD 14161616

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 16.

Fixed (9)

Show 9 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
297013maintainer-feedback? www/forgejo: panic at startup, and I'm not sure that version 16 is actually supposed to work on FreeBSDNew2026-07-26

Commits (61)

Ashish SHUKLA (ashish) · 8.0.0_1
all: Bump after lang/go122 update
aeb0113515
Vladimir Druzenko (vvd) · 8.0.0
www/forgejo: update 7.0.4 → 8.0.0

Changelogs:
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md#8-0-0

PR:	280515
10f54e767b
Ashish SHUKLA (ashish) · 7.0.4_1
all: Bump after lang/go122 update
f36b85a91c
Fernando Apesteguía (fernape) · 7.0.4
www/forgejo: update to 7.0.4 (fixes security vulnerabilities)

CVE-2024-24789: the archive/zip package's handling of certain types of invalid
zip files differs from the behavior of most zip implementations. This
misalignment could be exploited to create an zip file with contents that vary
depending on the implementation reading the file.

PR:		279781
Reported by:	stb@lassitu.de (maintainer)
MFH:		2024Q2
Security:	CVE-2024-24789
be43fb2830
Ashish SHUKLA (ashish) · 7.0.3_1
all: Bump after lang/go122 update

MFH:		2024Q2
b24868e7be
Fernando Apesteguía (fernape) · 7.0.3
www/forgejo: update to 7.0.3 (fixes CVE)

ChangeLog:
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md#7-0-3

PR:		279250
Reported by:	stb@lassitu.de (maintainer)
MFH:		2024Q2 (security fix)
Security:	CVE-2024-24788
b7a05632d1
Li-Wen Hsu (lwhsu) · 7.0.2
www/forgejo: Update to 7.0.2

Also improve diagnostics prior to starting the service, add information
to pkg-message, and enable running the forgejo binary on the command
line more easily.

Release notes:
  https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md#7-0-2

PR:		278876
bfcf765a32
Ashish SHUKLA (ashish) · 1.21.10.0_2
all: Bump after lang/go121 update

MFH:		2024Q2
fce0cc3272
Ashish SHUKLA (ashish) · 1.21.10.0_1
all: Bump after lang/go121 update

MFH:		2024Q2
32b284679a
Fernando Apesteguía (fernape) · 1.21.10.0
www/forgejo: update to v1.21.8-0

PR:		278119
Reported by:	stb@lassitu.de (maintainer)
MFH:		2024Q2 (security fix)
Security:	CVE-2023-45288
e2de6b1f88
Muhammad Moinur Rahman (bofh) · 1.21.7.0
www/forgejo: New port
00770786d8