Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-564v-3rfc-352m