--- title: Forgejo Critical Security Release 1.18.1-0 | daily.dev description: Forgejo v1.18.1-0 has been released as a critical security update addressing two Git CVEs (CVE-2022-23521 and CVE-2022-41903). Forgejo can act as an... canonical: https://daily.dev/posts/forgejo-critical-security-release-1-18-1-0-us1f0syow twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Forgejo Critical Security Release 1.18.1-0 | daily.dev og:description: Forgejo v1.18.1-0 has been released as a critical security update addressing two Git CVEs (CVE-2022-23521 and CVE-2022-41903). Forgejo can act as an... og:url: https://daily.dev/posts/forgejo-critical-security-release-1-18-1-0-us1f0syow og:image: https://api.daily.dev/og/posts/us1f0syOW.png og:image:alt: Forgejo Critical Security Release 1.18.1-0 og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Forgejo Critical Security Release 1.18.1-0 **[Forgejo News](https://daily.dev/sources/forgejo)** · 4 min read · 0 upvotes · 0 comments ## Summary Forgejo v1.18.1-0 has been released as a critical security update addressing two Git CVEs (CVE-2022-23521 and CVE-2022-41903). Forgejo can act as an intermediary allowing attackers to reach a vulnerable git binary. Users running Forgejo as a binary should upgrade git to v2.39.1 or a patched maintenance release. Users running Forgejo container images must pull the new 1.18.1-0 image, which bundles a patched git 2.36.4 from Alpine 3.16. The Forgejo security team also notified the Gitea security team about the issue. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#containers](https://daily.dev/tags/containers), [#forgejo](https://daily.dev/tags/forgejo), [#git](https://daily.dev/tags/git), [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/forgejo-critical-security-release-1-18-1-0-us1f0syow) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Forgejo Critical Security Release 1.18.1-0","url":"https://daily.dev/posts/forgejo-critical-security-release-1-18-1-0-us1f0syow","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/forgejo-critical-security-release-1-18-1-0-us1f0syow"},"datePublished":"2026-07-26T07:48:36.696Z","dateModified":"2026-07-30T02:12:38.838Z","description":"Forgejo v1.18.1-0 has been released as a critical security update addressing two Git CVEs (CVE-2022-23521 and CVE-2022-41903). Forgejo can act as an...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ecd9058ec824271361a436684af5bb15?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ecd9058ec824271361a436684af5bb15?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Forgejo News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Forgejo News","logo":"https://media.daily.dev/image/upload/s--Cq9uBvkb--/f_auto,q_auto/v1785052096/logos/forgejo?_a=BAMAMicg0","url":"https://daily.dev/sources/forgejo"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/forgejo-critical-security-release-1-18-1-0-us1f0syow","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"containers,forgejo,git,security","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Forgejo News","item":"https://daily.dev/sources/forgejo"},{"@type":"ListItem","position":3,"name":"Forgejo Critical Security Release 1.18.1-0"}]} ```