Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-c3rf-94h6-vj8v