{"uuid": "5260eef8-373e-4e50-afc4-7ed5dd34897b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-89094", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117248919367381106", "content": "RE: https://infosec.exchange/@cR0w/117247864965166656\nCVE for this one:\nhttps://nvd.nist.gov/vuln/detail/cve-2026-89094\nsev:CRIT 9.9 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\n\nForgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled.", "creation_timestamp": "2026-09-10T21:42:16.203278Z"}