<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: forgejo</title><description>Every new CVE for forgejo.</description><link>https://agentprime.io/</link><item><title>CVE-2026-119547: Forgejo through 15.0.11, 16.0.7, and 17.0.1 Information Disclosure via /api/v1/user/keys/{id}</title><link>https://agentprime.io/advisories/CVE-2026-119547/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119547/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 11:31:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-119546: Forgejo through 15.0.11, 16.0.7, and 17.0.1 Path Traversal via restore-repo</title><link>https://agentprime.io/advisories/CVE-2026-119546/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119546/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 11:30:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-119545: Forgejo through 15.0.11, 16.0.7, and 17.0.1 SSRF via OpenID Discovery</title><link>https://agentprime.io/advisories/CVE-2026-119545/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119545/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 11:30:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90679: Forgejo: Forgejo 13.0.0 through 16.0.4, when &quot;[federation] ENABLED = true&quot; is set…</title><link>https://agentprime.io/advisories/CVE-2026-90679/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90679/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 13 Sep 2026 03:55:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-89151: Incorrect authorization in Forgejo</title><link>https://agentprime.io/advisories/CVE-2026-89151/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-89151/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Sep 2026 02:23:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-89094: Template injection in Forgejo</title><link>https://agentprime.io/advisories/CVE-2026-89094/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-89094/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 20:42:18 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-82556: Forgejo Repository Migration is_migrate_allowed.go net.LookupIP server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-82556/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-82556/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 30 Aug 2026 17:45:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-59102: Forgejo &lt; 15.0.3 - Stored XSS via Actions Run Full Name Rendering</title><link>https://agentprime.io/advisories/CVE-2026-59102/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-59102/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Jul 2026 19:44:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-68937: Forgejo: Forgejo before 13.0.2 allows attackers to write to unintended files…</title><link>https://agentprime.io/advisories/CVE-2025-68937/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-68937/</guid><description>CVSS 9.5 (Critical). Critical: CVSS score 9.5: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Dec 2025 23:57:30 GMT</pubDate><category>CVE</category><category>critical</category></item></channel></rss>