nextcloud/server
master@ 25900f6Fixes11
CVEs0
Peak severityHigh
Commits50,000
Regression coverage16.7%
Highlights
Authentication Bypass: 4 prior fixes. Scrutinize any change in this area.
apps/dav/lib/Connector/PublicAuth.php: most-fixed (1 issue). Treat as high-risk during review.
8 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authentication Bypass: 1 historical fix(es) link lib/private/User/Session.php to Authentication Bypass.
Authentication Bypass: 1 historical fix(es) link apps/files_external/lib/Lib/Auth/Password/SessionCredentials.php to Authentication Bypass.
Authentication Bypass: 1 historical fix(es) link apps/dav/lib/Connector/PublicAuth.php to Authentication Bypass.
Last analyzed 11 Oct 2026, 05:00 UTC