It seems like whenever I work on #forgejo, some hacky code from the #gitea days pops up. If you use forgejo, you should really be grateful to the new maintainers for being the competent developers that they are.

And all the linting and checking they have sometimes is a PITA, but for a good […]

GitNex 15 is OUT now..

Feature highlights:
- Unified notifications
- 2 new themes
- Tags for files and commits
- Comment UI expansion with file uploads, notes addition and more
- Content viewer now supports tablets
- and more..

codeberg.org/gitnex/GitNe...

#gitnex #git #android #app #gitea

Discover how the Red Heron group exploited a Gitea N-day flaw to steal source code and deploy the stealthy SIXZUT Linux rootkit in a multinational campaign.

#RedHeron #Gitea #SIXZUT #Rootkit #CyberSecurity

GitNex 15 will have two new themes: Forgejo Colors (Dark) and Gitea Colors (Dark), repository transfer accept/reject UI and switch to tags for commits and files.

Most likely release day is tomorrow.

#gitnex #git #android #app #gitea #forgejo #codeberg #opensource #foss

Heads up if you #selfHost #Forgejo or #Gitlab or #Gitea or whatever! 🚨

Check your logs because you might be getting hammered by crawlers. I don't really mind crawlers, per se. But I didn't realize how much Forgejo exposes. Every commit, every file, every branch is traversable. My little 2 vcpu […]

公開PoCが出た瞬間、宿題が始まるんじゃねぇ。自動化のスタートだ。💎

Red Heron、GiteaのCVE-2026-60004。公開PoCを数日で自動登録→侵害→リポジトリ窃取まで組んだ。1,386台を7か国でスキャン。台湾の1環境ではProxmoxクラスタ3台のrootまで届いてる。
https://www.acronis.com/en/tru/posts/red-heron-exploits-gitea-n-day-flaw-in-multinational-campaign-exposing-new-linux-rootkit
#Gitea #CVE

Critical Gitea RCE bug CVE-2026-60004 in versions 1.17-1.27.0 now in live attacks—upgrade ASAP. #Security #CVE2026-60004 #Gitea #RCE #Infosec #CyberAttack https://thedailytechfeed.com/critical-gitea-rce-vulnerability-under-active-attack-what-you-need-to-know/

Red Heron weaponized a Gitea n-day to steal source code and creds, then deployed JITTERLY with the SIXZUT rootkit for persistence and lateral movement across Proxmox, Synology NAS, and other systems. #Gitea #China #Rootkit

A critical Gitea RCE vulnerability exploited in wild attacks exposes servers. Patch this Gitea RCE vulnerability now to prevent full system compromise.

#Gitea #CVE202660004 #Cybersecurity #RedHeron #LinuxRootkit #InfoSec

Red Heron abuses Gitea RCE to steal code & secrets from 13 orgs across 6 countries. #Gitea #CyberEspionage #RedHeron #SecurityNews #Vulnerability #CVE2026 https://thedailytechfeed.com/red-heron-exploits-gitea-rce-to-breach-dev-platforms-in-global-espionage-campaign/

Red Heron nutzt kritische Gitea-Lücke für internationale Cyberangriffe

Acronis_de #Cybersecurity #Cybersicherheit #Gitea #Linux #LinuxRootkit #RedHeron #Schadsoftware Acronis

netzpalaver.de/2026/...

Was away with a new project (NexPanel) written in Go. Still WIP.

GitNex 15 is due this week with improved dock UI.

The biggest change is notifications, it is improved now. Unified notification is added for all accounts. Was not an easy feature to implement.

#gitnex #git #android #gitea #forgejo

CVE-2026-26292 - gitea open source git server
Versions of Gitea before 1.25.5 allow attackers to bypass security restrictions for large file transfers. This can allow unauthorized access to sensitive data. To…

Too many irrelevant or confusing CVEs? Use stackflag.com

#gitea #Golang #CVE #infosec

Backup and Restore Gitea server

#linux #self-hosting #git #gitea #backup #DevOps

https://www.glukhov.org/developer-tools/git-and-forges/gitea-backup-restore/

Is there any #Forgejo (or #Gitea) public server (even cheaply paid for) which would not be #AIhostile? E.g., so I would be able to set up AI review, etc.?

Pushin.eu is building an EU-based Git host to protect code from AI scraping.

Need data sovereignty today? Running an open-source tool like Forgejo or Gitea is the best way to keep your repositories private.
pushin.eu #git #gitea #privacy #opensource