--- title: Forgejo Security Release 1.20.3-0 | daily.dev description: Forgejo v1.20.3-0 is a security and bug-fix release addressing two issues: a storage configuration bug that could cause data loss by merging subsystem... canonical: https://daily.dev/posts/forgejo-security-release-1-20-3-0-ve0zq3zoy twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Forgejo Security Release 1.20.3-0 | daily.dev og:description: Forgejo v1.20.3-0 is a security and bug-fix release addressing two issues: a storage configuration bug that could cause data loss by merging subsystem... og:url: https://daily.dev/posts/forgejo-security-release-1-20-3-0-ve0zq3zoy og:image: https://api.daily.dev/og/posts/vE0zQ3zoy.png og:image:alt: Forgejo Security Release 1.20.3-0 og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Forgejo Security Release 1.20.3-0 **[Forgejo News](https://daily.dev/sources/forgejo)** · 10 min read · 0 upvotes · 0 comments ## Summary Forgejo v1.20.3-0 is a security and bug-fix release addressing two issues: a storage configuration bug that could cause data loss by merging subsystem directories or misplacing data after upgrade, and an API vulnerability that leaked email addresses. Admins running versions below v1.20.3-0 with certain storage configurations in app.ini must manually fix their config before upgrading. The release includes sanity checks that block upgrades if risky storage configs are detected, and downgrades to v1.20.1-0 or v1.20.2-0 are also blocked. Detailed steps are provided for both local and Minio (S3) storage backends. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#forgejo](https://daily.dev/tags/forgejo), [#security](https://daily.dev/tags/security), [#self-hosting](https://daily.dev/tags/self-hosting) [View this post on daily.dev](https://daily.dev/posts/forgejo-security-release-1-20-3-0-ve0zq3zoy) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Forgejo Security Release 1.20.3-0","url":"https://daily.dev/posts/forgejo-security-release-1-20-3-0-ve0zq3zoy","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/forgejo-security-release-1-20-3-0-ve0zq3zoy"},"datePublished":"2026-07-26T07:48:37.449Z","dateModified":"2026-07-30T02:12:39.295Z","description":"Forgejo v1.20.3-0 is a security and bug-fix release addressing two issues: a storage configuration bug that could cause data loss by merging subsystem...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ecd9058ec824271361a436684af5bb15?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/ecd9058ec824271361a436684af5bb15?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Forgejo News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Forgejo News","logo":"https://media.daily.dev/image/upload/s--Cq9uBvkb--/f_auto,q_auto/v1785052096/logos/forgejo?_a=BAMAMicg0","url":"https://daily.dev/sources/forgejo"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/forgejo-security-release-1-20-3-0-ve0zq3zoy","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"forgejo,security,self-hosting","timeRequired":"PT10M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Forgejo News","item":"https://daily.dev/sources/forgejo"},{"@type":"ListItem","position":3,"name":"Forgejo Security Release 1.20.3-0"}]} ```