CVE-2026-119545 | Forgejo up to 15.0.11/16.0.7/17.0.1 OpenID Login openid.go server-side request forgery

October 30, 2026 Yanac

A vulnerability was found in Forgejo up to 15.0.11/16.0.7/17.0.1. It has been declared as problematic. The affected element is an unknown function of the file modules/auth/openid/openid.go of the component OpenID Login. Such manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-119545. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More