← Back to context Comment by fartfeatures 14 hours ago It is unfortunate nobody tipped anyone off downstream. 2 comments fartfeatures Reply dust-jacket 4 hours ago CVE AND release note not enough tipping off for you?it is absolutely not on maintainers of projects to proactively notify those who've forked the project. clear and transparent notices are exactly the right approach vanschelven 6 hours ago given the fact that they communicated about this as a CVE, and Forgejo is a fork of gitea, one could say that this is on Forgejo though.
dust-jacket 4 hours ago CVE AND release note not enough tipping off for you?it is absolutely not on maintainers of projects to proactively notify those who've forked the project. clear and transparent notices are exactly the right approach
vanschelven 6 hours ago given the fact that they communicated about this as a CVE, and Forgejo is a fork of gitea, one could say that this is on Forgejo though.
CVE AND release note not enough tipping off for you?
it is absolutely not on maintainers of projects to proactively notify those who've forked the project. clear and transparent notices are exactly the right approach
given the fact that they communicated about this as a CVE, and Forgejo is a fork of gitea, one could say that this is on Forgejo though.