Короткий огляд матеріалу з Dev.to DevOps: A .git Folder Is Not Data: Inside the Forgejo Template RCE, and How to Audit Your Own Instance.
Every developer who has created a project knows the flow. Click "new repository", pick a template, and the forge copies a starter repo for you, maybe swapping in your project name where the template says {{ REPO_NAME }}. It is the least suspicious button in the whole interface. On September 10, 2026, the Forgejo team released 16.0.4 to fix a critical bug hiding behind exactly that button. Versions
Це адаптований дайджест українською, а не повний передрук статті.
Джерело: Dev.to DevOps
Залишити відповідь