Forgejo patched a critical bug: a malicious template could smuggle a .git folder into git init - read files, run code on host. I scaffold repos from templates. Never checked for hostile ones.

https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/16.0.4.md

#SelfhostedGit

8,300+ Gitea Servers Are Being Actively Exploited for Remote Code Execution

https://blindthoughts.com/gitea-rce-8300-servers-actively-exploited

#gitea #remotecodeexecution #selfhostedgit #patchnow #vulnerability

Save Money on Git, Software Engineering Wins

https://techramp.live/save-money-on-git-software-engineering-wins/?utm_source=bluesky&utm_medium=social
#gitea #awslightsail #selfhostedgit