Alerts This Week
Warning Icon 1 929
Alerts This Week
Warning Icon 1 929

Fedora 43 NextCloud 32.0.6 Prototype Pollution Denial of Service Advisory

fedora
Calendar Grey March 2, 2026
Dist Fedora Esm H88
NextCloud 32.0.6 release for Fedora addresses prototype pollution and DoS threats. Install updates promptly to ensure security.
32.0.6 release

Summary

NextCloud gives you universal access to your files through a web interface or

WebDAV. It also provides a platform to easily view & sync your contacts,

calendars and bookmarks across all your devices and enables basic editing right

on the web. NextCloud is extendable via a simple but powerful API for

applications and plugins.

Update Information:

32.0.6 release

Topics%20covered

Topics Covered

security advisory fedora DoS nextcloud prototype pollution 32.0.6

Change Log

* Sat Feb 21 2026 Andrew Bauer - 32.0.6-1 - 32.0.6 release RHBZ#2440650

References


[ 1 ] Bug #2432927 - CVE-2025-13465 nextcloud: prototype pollution in _.unset and _.omit functions [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2432927 [ 2 ] Bug #2432981 - CVE-2025-13465 nextcloud: prototype pollution in _.unset and _.omit functions [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2432981 [ 3 ] Bug #2433031 - CVE-2025-13465 nextcloud: prototype pollution in _.unset and _.omit functions [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2433031 [ 4 ] Bug #2439004 - CVE-2026-25639 nextcloud: Axios affected by Denial of Service via __proto__ Key in mergeConfig [epel-10] https://bugzilla.redhat.com/show_bug.cgi?id=2439004 [ 5 ] Bug #2439019 - CVE-2026-25639 nextcloud: Axios affected by Denial of Service via __proto__ Key in mergeConfig [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2439019 [ 6 ] Bug #2439026 - CVE-2026-25639 nextcloud: Axios affected by Denial of Service via __p...

Read the Full Advisory

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ae48fa379e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: nextcloud
Product: Fedora 43
Version: 32.0.6
Release: 1.fc43
URL: http://nextcloud.com
Summary: Private file sync and share server

Topics%20covered

Topics Covered

security advisory fedora DoS nextcloud prototype pollution 32.0.6

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here