CVE-2026-119546

A flaw was found in Forgejo. A path traversal vulnerability in the repository restore functionality allows an attacker to access files located outside the intended archive directory. By convincing an administrator to restore a repository from a crafted dump file containing directory traversal...