Follow-up to Carrot disclosure: Forgejo
Summary
This article provides a post-disclosure update on Forgejo vulnerability disclosures, detailing community responses, security policy debates, and the author's outreach to Forgejo security. It highlights challenges around responsible disclosure, moderation, and open-source governance, with lessons for SMB security practices.