CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

www/forgejo15 15.0.10_1

Compact self-hosted Git forge

1
unaddressed
0
VuXML only
2
fixed
0
open problem reports

Port info

Maintainer
des@FreeBSD.org
Packages
latest: 15.0.10_1
Upstream
up to date
Last update
to 15.0.10_1 · d81b7ba3c3
Quarterly
2026Q4: 15.0.10_1 · last MFH 60647eff54
WWW
https://forgejo.org/
Links
cgit · VuXML

Install

Package
# pkg install forgejo15
installs 15.0.10_1 from latest; from quarterly (2026Q4) 15.0.10_1
Port
# cd /usr/ports/www/forgejo15 && make install clean
# make -C /usr/ports/www/forgejo15 config  # change options first
Size
36 MiB download · 110 MiB installed
Depends on
devel/git 2.56.0, devel/git-lfs 3.6.1_24
License
GPLv3+
Creates
user git, group git
Options
4 of 4 on in the package: BINDATA GIT_LFS PAM SQLITE
pkg-message
Shown after installing
Before starting forgejo for the first time, you must set a number of
secrets in the configuration file. For your convenience, a sample file
has been copied to /usr/local/etc/forgejo/conf/app.ini.

You need to replace every occurence of CHANGE_ME in the file with
sensible values. Please refer to the official documentation at
https://forgejo.org for details.

You will also likely need to create directories for persistent storage.
Run
    su -m git -c 'forgejo doctor check'
to check if all prerequisites have been met.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1615.0.10_115.0.9_1–
FreeBSD 1515.0.10_115.0.10–
FreeBSD 1415.0.10_115.0.9_115.0.10_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1515.0.10_115.0.10–
FreeBSD 1415.0.10_115.0.9_115.0.10_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (1)

The CVE record lists the packaged version 15.0.10_1 as affected, and no VuXML entry names the CVE. What does this mean?

CVECVSSPublishedDescription
CVE-2026-906794.32026-09-13Forgejo 13.0.0 through 16.0.4, when "[federation] ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not allow account takeover or con…

VuXML only (0)

Listed in VuXML, the packaged version 15.0.10_1 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (2)

Show 2 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-890949.92026-09-10Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled.
CVE-2026-891513.52026-09-11Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (20)

Dag-Erling Smørgrav (des) · 15.0.10_1 MFH 2026Q4 ✓
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Dag-Erling Smørgrav (des) · 15.0.10 MFH 2026Q4 ✓
www/forgejo15: Update to 15.0.10

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.10.md

MFH:		2026Q4
2d4f0c7e41
Dag-Erling Smørgrav (des) · 15.0.9
various: Drop Go 1.26+ version pin

This is a nop since 1.26 is the oldest supported version.
2c73fa4d6e
Dag-Erling Smørgrav (des) · 15.0.9 MFH 2026Q3 ✓
www/forgejo15: Update to 15.0.9

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.9.md

MFH:		2026Q3
18b1ddeb19
Dag-Erling Smørgrav (des) · 15.0.8 MFH 2026Q3 ✓
www/forgejo15: Update to 15.0.8

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.8.md

MFH:		2026Q3
ce4dafed2c
Adam Weinberger (adamw) · 15.0.7_1
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Dag-Erling Smørgrav (des) · 15.0.7 MFH 2026Q3 ✓
www/forgejo15: Update to 15.0.7

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.7.md

MFH:		2026Q3
bd4561ed9e
Dag-Erling Smørgrav (des) · 15.0.6_2 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 15.0.6_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Dag-Erling Smørgrav (des) · 15.0.6 MFH 2026Q3 ✓
www/forgejo15: Update to 15.0.6

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.6.md

MFH:		2026Q3
b38bb72f88
Dag-Erling Smørgrav (des) · 15.0.5 MFH 2026Q3 ✓
www/forgejo15: Update to 15.0.5

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.5.md

MFH:		2026Q3
f21f20e444
Dag-Erling Smørgrav (des) · 15.0.4 MFH 2026Q3 ✓
www/forgejo15: Update to 15.0.4

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.4.md

MFH:		2026Q3
f6ae130ed2
Dag-Erling Smørgrav (des) · 15.0.3_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Dag-Erling Smørgrav (des) · 15.0.3
www/foregjo15: Update to 15.0.3

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.3.md
627b3818cf
Dag-Erling Smørgrav (des) · 15.0.2_1
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Dag-Erling Smørgrav (des) · 15.0.2
www/foregjo15: Update to 15.0.2

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.2.md
f0dd9294ef
Adam Weinberger (adamw) · 15.0.1_1
various: Bump ports for Go 1.26.3
5f9824aeed
Dave Cottlehuber (dch) · 15.0.1
www/forgejo15: Fix broken configure target

Differential Revision:	https://reviews.freebsd.org/D56785
Fixes:			aae925f47e68ed317c1d8e0e5e0debc07df2a9b2
Sponsored by:		SkunkWerks, GmbH
4df4435fae
Dag-Erling Smørgrav (des) · 15.0.1
www/forgejo15: New port for Forgejo 15.0.1

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.0.md
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.1.md
aae925f47e