forgejo-11-secure/routers/web/org/TestViewProjectPRLinkVisibility/project_issue.yml at main - VibedByKaKi/forgejo-11-secure - KaKi's git

VibedByKaKi/forgejo-11-secure

mirror of https://github.com/VibedByKaKi/forgejo-11-secure.git synced 2026-11-10 16:03:23 +01:00

Mathieu Fenniak a32151caf6 [v11.0/forgejo]: 2026-06-10 security patches (#13003 )

- fix: LFS locks must belong to the intended repo, port from Gitea
- fix: prevent unauthorized access to draft releases via API
- fix: prevent writes to OpenID visibility which may affect other users
- fix: prevent viewing private PRs that are linked to public issues on public projects

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/13003
Reviewed-by: Beowulf <beowulf@beocode.eu>

2026-06-10 06:02:41 +02:00

6 lines

77 B

YAML

Raw Permalink Blame History

 -
   id: 10
   issue_id: 16
   project_id: 7
   project_board_id: 0
   sorting: 1