Forgejo prior to 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication.
forgejo forgejo