{"action":"Upgrade nextcloud-client to 3.6.2-r0 or later.","affected":[{"fixed":"3.6.2-r0","introduced":"0"}],"component":"nextcloud-client","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.24","exploited":false,"fixed_versions":["3.6.2-r0"],"id":"tcs_01M6HKEKRYJXJMM43148SEFXE1","modified_at":"2026-11-03T07:31:26.089861503Z","published_at":"2022-11-11T19:15:11.323Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2022-41882","https://security.alpinelinux.org/vuln/CVE-2022-41882"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2022-41882#Alpine:v3.24/nextcloud-client","url":"https://osv.dev/vulnerability/ALPINE-CVE-2022-41882"}],"summary":"The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtu"}