3 ms·
It is unfortunate nobody tipped anyone off downstream.
by fartfeatures 22d ago
It is unfortunate nobody tipped anyone off downstream.
- vanschelven 22d agogiven the fact that they communicated about this as a CVE, and Forgejo is a fork of gitea, one could say that this is on Forgejo though.
- fartfeatures 21d agoAgreed, I didn't realise there had been a CVE.
- dust-jacket 22d agoCVE AND release note not enough tipping off for you? it is absolutely not on maintainers of projects to proactively notify those who've forked the project. clear and transparent notices are exactly the right approach
- fartfeatures 21d agoApologies I didn't see there had been a CVE. I completely retract my statement.