gitforge/routers
Mathieu Fenniak a32151caf6 [v11.0/forgejo]: 2026-06-10 security patches (#13003)
- fix: LFS locks must belong to the intended repo, port from Gitea
- fix: prevent unauthorized access to draft releases via API
- fix: prevent writes to OpenID visibility which may affect other users
- fix: prevent viewing private PRs that are linked to public issues on public projects

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/13003
Reviewed-by: Beowulf <beowulf@beocode.eu>
2026-06-10 06:02:41 +02:00
..
api [v11.0/forgejo]: 2026-06-10 security patches (#13003) 2026-06-10 06:02:41 +02:00
common [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
install [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00
private fix(sec): only degrade permission check for git push 2025-05-02 07:05:38 +02:00
utils
web [v11.0/forgejo]: 2026-06-10 security patches (#13003) 2026-06-10 06:02:41 +02:00
init.go [v11.0/forgejo] chore: branding import path (#7354) 2025-03-27 20:13:05 +00:00