Welp. My Forgejo instance got popped by CVE-2026-60004. Hooray for RCE 🙃

My two screw-ups were
1. I pinned it to v13 "for stability" forever ago, then forgot about it.
2. I accidentally left sign-ups enabled.

Grabbed the seemingly obfuscated payload script from the attacker's server. Looks like it hits a different IP and grabs one of three different binaries depending on the victim's CPU architecture. You best believe I'm grabbing those too

Will probably write a blog post on what I find, but I'll at least post updates here, too

#Homelab #SelfHosted #PatchYourShit #Forgejo

@nixCraft thanks!

Popular amongst the shares: <https://www.reddit.com/r/linux/comments/1v00tfs/flathub_announces_migration_away_from_github_to/>

#GitHub #Forgejo #Flathub

@jpmens

Oh, that is a very nice project. The other day I learned that #Forgejo will get native Gists support, a feature I suggested to #Codeberg 5 years ago..

https://codeberg.org/Codeberg/Community/issues/382#issuecomment-19747559

@michael

For the #ActivityPub and #ForgeFed implementation the #Forgejo contrib organization on #Codeberg has a separate repository and a roadmap they keep up-to-date. See:

https://codeberg.org/forgejo-contrib/federation/src/branch/main/FederationRoadmap.md

@michael

Oh, another good page to consult is the delightful #forgejo curated list with a ton of good resources:

https://delightful.coding.social/delightful-forgejo/

RE: https://hachyderm.io/@adminmagazine/116817007327226137

In the second installment of the self-hosting series, @adminmagazine looks at self-hosted collaboration with Forgejo.

#Forgejo #SelfHosting #Git

#Privacy #services by https://nadeko.net/

#Invidious
https://inv.nadeko.net

#Matrix (Synapse) https://matrix.nadeko.net

#Rimgo
https://ri.nadeko.net

Privatebin
https://pbin.nadeko.net

Redlib
https://redlib.nadeko.net

#Phantom
https://phantom.nadeko.net

#Breezewiki
https://breezewiki.nadeko.net

#Forgejo
https://git.nadeko.

Monero Node
xmr.nadeko.net:18081

Jitsi (New)
https://meet.nadeko.net

#IRC
https://znc.nadeko.net

Forgejo: https://forgejo.org ...

"Forgejo is a Free Software platform for collaboration and productivity in software development. It offers a familiar environment to GitHub users, easy installation and maintenance, and a focus on security, scaling, federation and privacy."

... codeberg has a nice setup (via forgejo) if you don't want to self-host.

#git #forgejo #scm #vcs #sources #source #code #vps #gitlab #github #codeberg #hosting