Skip to content

CVE lookup

CVE-2026-89094

Pruva has a verified reproduction for CVE-2026-89094: Forgejo <16.0.4 RCE via crafted template repository (.forgejo/template expansion recreates .git folder adopted by git init). The canonical evidence record is REPRO-2026-00345.

REPRO

REPRO-2026-00345

Package

Unknown

Severity

CRITICAL

Status

published