Collectives vulnerabilities

CVEs whose affected-version data names the Collectives package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-77166Low· 2.4

today

The emoji field in the page emoji update endpoint does not properly validate user input

The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide other items.

▾ SunlitNextcloud · Collectivesvia NVD