docker-nextcloud/SECURITY.md

Security Policy

Supported versions

As of now, only the latest stable version is supported.

Version	Supported
23. x	✅
22. x	❌
21. x	❌

Please update to the latest version available. Major migrations are always tested before being pushed.

Automated vulnerability scanning

Uploaded images are regularly scanned for OS vulnerabilities.

Reporting a vulnerability

Upstream vulnerabilities should be reported to upstream projects according to their own security policies.

Regarding vulnerabilities specific to this project:

• Faulty configuration files
• Unsafe defaults
• Dependencies security updates

Those can be disclosed in private to wonderfall@pm.me or wonderfall:targaryen.house on Matrix (preferred).