FORGEJO <=16.0.3 PATCHED FOR CRITICAL RCE

The vulnerability allows unauthenticated attackers to execute arbitrary code on affected Forgejo instances. Details are available in the [16.0.4 release notes](https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/16.0.4.md). Forgejo is a community-driven fork of Gitea designed for self-hosting. The flaw represents a severe risk to organizations running vulnerable versions, particularly those exposed to untrusted networks. Administrators must prioritize upgrading to version 16.0.4 or later. The security patch was released without advance notice, suggesting the vulnerability was actively exploited or posed immediate risk. The disclosure gained significant attention on developer communities, with over 100 points and dozens of comments on Hacker News, indicating widespread awareness among the self-hosted software community.