diff --git a/pkgs/applications/version-management/forgejo/default.nix b/pkgs/applications/version-management/forgejo/default.nix
index 40f95f171dc4..9de58d8fd621 100644
--- a/pkgs/applications/version-management/forgejo/default.nix
+++ b/pkgs/applications/version-management/forgejo/default.nix
@@ -151,5 +151,9 @@ buildGoModule rec {
     maintainers = with lib.maintainers; [ emilylange urandom bendlas adamcstephens ];
     broken = stdenv.isDarwin;
     mainProgram = "gitea";
+    knownVulnerabilities = [
+      "Forgejo v1.20.x is EOL"
+      "OAuth2 implementation does not always require authentication for public clients"
+    ];
   };
 }