Carrot publishes a disclosure related to Forgejo, but the announcement provides no public details

The article consists only of the title and body text stating “Carrot Disclosure: Forgejo.” It does not include details about the nature of the disclosure, affected versions, remediation steps, or whether it concerns security, compliance, or another issue.

The lack of context limits immediate assessment, but disclosures involving developer infrastructure projects can matter because they may affect software supply chains. Readers should wait for additional details from Carrot or Forgejo before drawing conclusions or taking action.