All versions of the Nextcloud community version which still receive updates will be supported and will receive the minor version updates and security patches.

Please update to the latest version available. Major migrations are always tested before being pushed. An up-to-date list of the currently maintained Nextcloud versions can also be found in the Nextcloud Repository Wiki.

Uploaded images are regularly scanned for OS vulnerabilities.

Upstream vulnerabilities should be reported to upstream projects according to their own security policies.

Regarding vulnerabilities specific to this project:

• Faulty configuration files
• Unsafe defaults
• Dependencies security updates

Those can be disclosed in private to [email protected].