-
Notifications
You must be signed in to change notification settings - Fork 2.1k
Pull requests: owncloud/core
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix: prevent arbitrary file write via unsanitized SVG/MVG bitmap previews [10.16] (OC10-164)
#41828
opened Sep 11, 2026 by
kw-tmueller
Contributor
Loading…
4 tasks done
fix: prevent arbitrary file write via unsanitized SVG/MVG bitmap previews (OC10-164)
#41827
opened Sep 11, 2026 by
oc-tmueller
Contributor
Loading…
4 tasks done
feat: temporarily lock out local accounts after failed logins
#41806
opened Sep 4, 2026 by
oc-tmueller
Contributor
Loading…
feat: temporarily lock out local accounts after failed logins
#41805
opened Sep 4, 2026 by
oc-tmueller
Contributor
Loading…
fix: prevent appconfig path traversal to RCE via public_/remote_ keys (OC10-146)
#41804
opened Sep 3, 2026 by
oc-tmueller
Contributor
Loading…
fix: prevent appconfig path traversal to RCE via public_/remote_ keys (OC10-146)
#41803
opened Sep 2, 2026 by
oc-tmueller
Contributor
Loading…
chore(deps): bump phpseclib/phpseclib from 3.0.56 to 4.0.1
dependencies
php
Pull requests that update Php code
#41798
opened Aug 30, 2026 by
dependabot
Bot
Loading…
chore(deps-dev): bump sinon from 19.0.5 to 22.1.0 in /build
dependencies
javascript
#41731
opened Jul 26, 2026 by
dependabot
Bot
Loading…
chore(deps): bump @bower_components/jquery-migrate from 1.4.0 to 3.0.0 in /build
dependencies
javascript
#41730
opened Jul 26, 2026 by
dependabot
Bot
Loading…
fix: Improve target option processing in js.js
#41729
opened Jul 25, 2026 by
odaysec
Contributor
Loading…
3 of 11 tasks
test: check the XML returned by occ commands in acceptance tests
#41655
opened Jun 26, 2026 by
phil-davis
Contributor
•
Draft
fix(trashbin): don't overwrite existing file when restoring to a target (#35974)
#41645
opened Jun 21, 2026 by
DeepDiver1975
Contributor
•
Draft
fix(backgroundjob): don't log ERROR for stale job rows of removed apps (#35589)
#41644
opened Jun 21, 2026 by
DeepDiver1975
Contributor
•
Draft
fix(installer): validate app archive before deleting installed app on update (#34669)
#41643
opened Jun 21, 2026 by
DeepDiver1975
Contributor
•
Draft
fix(occ): don't let one broken command make occ unusable (#33895)
#41642
opened Jun 19, 2026 by
DeepDiver1975
Contributor
•
Draft
fix(trashbin): avoid full filecache scan when restoring versions (#31682)
#41641
opened Jun 19, 2026 by
DeepDiver1975
Contributor
•
Draft
fix(sharing): show original file owner in reshare panel
#41640
opened Jun 19, 2026 by
DeepDiver1975
Contributor
•
Draft
chore(ci): run webUILogin acceptance test suite in CI
#41629
opened Jun 16, 2026 by
phil-davis
Contributor
•
Draft
fix(command): restrict allowed_classes in ClosureJob unserialize() to prevent RCE
#41583
opened Jun 5, 2026 by
DeepDiver1975
Contributor
Loading…
3 tasks
fix(files_external): add SSRF host validation to external storage backend
#41581
opened Jun 5, 2026 by
DeepDiver1975
Contributor
Loading…
3 tasks
fix(files_sharing): enforce minimum search length in getUsers() and getGroups()
#41580
opened Jun 5, 2026 by
DeepDiver1975
Contributor
Loading…
2 tasks
fix(files/storage): add SSRF host validation to DAV storage constructor
#41576
opened Jun 5, 2026 by
DeepDiver1975
Contributor
Loading…
3 tasks
Previous Next
ProTip!
Add no:assignee to see everything that’s not assigned.