Approved changes feed: RSS · Atom

cpe:2.3:a:nextcloud:collectives:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNextcloud (e5ae4298-6932-564f-a40d-08cebea039a5)
ProductCollectives (7df2a495-0afa-5f4f-a9ce-acd195b74d59)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-77171 vulnerable 2026-11-03 10:15:17.963139 Details available
LOW (3.5)
A public shared collective always allowed recipients of the link to create pages.
Published: 2026-10-27T16:15:34.770Z
Updated: 2026-11-04T20:25:28.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-77166 vulnerable 2026-10-13 12:28:29.337575 Details available
LOW (2.4)
The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide other items.
Published: 2026-09-21T15:25:33.269Z
Updated: 2026-09-21T18:43:30.904Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.