| Package | Affected versions | Patched versions |
|---|---|---|
| forgejo | < 1.20.5-1 | 1.20.5-1 |
Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (or another extension) to a URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free