Medium severity6.5NVD Advisory· Published Mar 16, 2026· Updated Apr 27, 2026

CVE-2025-68971

Description

In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment (e.g., to be associated with an issue or a release).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Forgejo/Forgejollm-create
Range: <=13.0.3

Patches

Vulnerability mechanics

References

bugs.freebsd.org/bugzilla/show_bug.cginvd
zenodo.org/records/18945481nvd
zenodo.org/records/19058493nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000