CVE-2026-89151

Description

Forgejo before 16.0.4 allows use of restricted API tokens for unintended access to the "allow maintainer edit" feature.

References

• https://codeberg.org/forgejo/forgejo/milestone/139655
• https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/15.0.8.md