Is Nextcloud Server 31.0.5 affected?

EOL

5 known vulnerabilities affect 31.0.5 (highest CVSS 6.8).

Your branch 31 has reached end of life (Feb 28, 2026).

45 newer releases in its track, up to 35.0.2. What changed up to 35.0.2

Vulnerabilities affecting 31.0.5

6.8
CVE-2026-45810 Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, a missing check of a relation allowed authentica… fixed in 31.0.12
6.4
CVE-2025-59788 Cross-site scripting (XSS) vulnerability in a reachable files_pdfviewer example directory in Nextcloud with versions before 22.2.10.33, 23.0.12.29, 24.0.12.28, 25.0.13.23, 26.0.13.20, 27.1.11.20, 2… fixed in 31.0.10
5.4
CVE-2025-66512 Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Server Enterprise prior to 31.0.12 and 32.0.3, a missing sanitization allowed malicious users to circumvent the cont… fixed in 31.0.12
4.5
CVE-2025-66510 Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 31.0.10 and 32.0.1 and Nextcloud Enterprise Server prior to 28.0.14.11, 29.0.16.8, 30.0.17.3, and 31.0.10, cont… fixed in 31.0.10
4.4
CVE-2026-45279 Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.14, and 32.0.0 to before 32.0.4, if {lang} is used in the template directory conf… fixed in 31.0.14