Medium severity6.5NVD Advisory· Published Mar 16, 2026· Updated Apr 27, 2026

CVE-2025-68971

Description

In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment (e.g., to be associated with an issue or a release).

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

bugs.freebsd.org/bugzilla/show_bug.cginvd
zenodo.org/records/18945481nvd
zenodo.org/records/19058493nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000