All products

nextcloud-mcp-server

PyPI · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
nextcloud-mcp-server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )CVE-2026-55640 · GHSA-8VH3-G2QG-2H2CVersion ranges need review. nextcloud-mcp-server PyPI Critical Fix reported