What version of forgejo were you using? CVE-2026-60004 references gitea 1.27.1

Windows Latest previously reported that some Windows 11 PCs ship with malware built in that not even a clean install through the wrong region setting can avoid, and Microsoft told us at the time that they were aware of the behavior and looking into it. 3 years later, the company still hasn’t closed the door on OEMs using their own update pipeline to push ads.

This is supposed to be literally the selling point of a gated app store – they app store owner makes sure the apps available do not do anything negative to the user. If it fails this basic function, then why put up with it?