Forgejo v16.0 introduces critical security hardening for Git mirroring to prevent SSRF attacks by disabling HTTP redirect following. The release also removes the EXIF stripping feature due to AGPL licensing compliance issues and adjusts trusted proxy configurations for containerized deployments.
Background
Forgejo is a lightweight, community-driven fork of Gitea, providing self-hosted code collaboration services. Version 16.0 represents a significant update focusing on security stability and licensing compliance.
- Source
- Lobsters
- Published
- Jul 16, 2026 at 06:01 PM
- Score
- 6.0 / 10