CVE-2026-89151

No fix known EPSS <1%CVSS 3.5

Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature.

Published 2026-09-11 · CVE record · OSV

Products: Forgejo