{"action":"Upgrade nextcloud-client to 3.6.6-r0 or later.","affected":[{"fixed":"3.6.6-r0","introduced":"0"}],"component":"nextcloud-client","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.18","exploited":false,"fixed_versions":["3.6.6-r0"],"id":"tcs_01M6H58FQ48CD69GGMVM7VV1YX","modified_at":"2026-11-03T06:32:58.907727003Z","published_at":"2023-02-06T21:15:09.727Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2023-23942","https://security.alpinelinux.org/vuln/CVE-2023-23942"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2023-23942","url":"https://osv.dev/vulnerability/ALPINE-CVE-2023-23942"}],"summary":"The Nextcloud Desktop Client is a tool to synchronize files from a Nextcloud Server with your computer. Versions prior to 3.6.3 are missing sanitisation on qml labels which are used for basic HTML ele"}