docker-nextcloud/SECURITY.md

Security Policy

Supported versions

All versions of the Nextcloud community version which still receive updates will be supported and will receive the minor version updates and security patches.

Version	Supported
24. x	✅
23. x	✅
22. x	✅

Please update to the latest version available. Major migrations are always tested before being pushed.

Automated vulnerability scanning

Uploaded images are regularly scanned for OS vulnerabilities.

Reporting a vulnerability

Upstream vulnerabilities should be reported to upstream projects according to their own security policies.

Regarding vulnerabilities specific to this project:

• Faulty configuration files
• Unsafe defaults
• Dependencies security updates

Those can be disclosed in private to dev@hoellen.eu.