Forgejo Security Crisis: Critical RCE Proof Sparks 'Carrot Disclosure' Controversy

A security researcher has exposed critical vulnerabilities in Forgejo, including a full RCE chain, highlighting systemic flaws in its codebase. This 'Carrot Disclosure' approach forces the open-source project to prioritize a holistic security audit over quick patches, setting a new precedent for vendor accountability.