Remote Code Execution in Forgejo?

Carrot disclosure: Forgejo

Personal blog of Julien (jvoisin) Voisin