CVE-2022-41971

Nextcloud Talk for Android suffers a vulnerability where guests removed from a conversation can continue to receive video streams in a public call. Affected versions prior to 12.2.8, 13.0.10, 14.0.6, and 15.0.0 are vulnerable; patches are provided in those respective versions. The issue enables a...

CVE-2023-26041

The CVE-2023-26041 issue affects Nextcloud Talk: when cron jobs are misconfigured, expired messages are not actually expired and the API still returns them, with frontend hiding not applied. This results in conversations showing messages that should have expired. Affected product: Nextcloud Talk ...