| Package | Affected versions | Patched versions |
|---|---|---|
| deck | ≥ 1.3.0, < 1.4.1< 1.2.7 | 1.4.11.2.7 |
Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only the local Nextcloud server unless a global search has been explicitly chosen by the user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free