nextcloud

YesWeHackView on YesWeHack
RawAI Enhanced
25
In Scope
4
Out of Scope
In-Scope Assets (25)
AssetCategoryBountyQuick Links
https://github.com/nextcloud/activityOPEN-SOURCEYes-
https://github.com/nextcloud/androidOPEN-SOURCEYes-
https://github.com/nextcloud/bruteforcesettingsOPEN-SOURCEYes-
https://github.com/nextcloud/circlesOPEN-SOURCEYes-
https://github.com/nextcloud/desktopOPEN-SOURCEYes-
https://github.com/nextcloud/files_pdfviewerOPEN-SOURCEYes-
https://github.com/nextcloud/firstrunwizardOPEN-SOURCEYes-
https://github.com/nextcloud/iosOPEN-SOURCEYes-
https://github.com/nextcloud/logreaderOPEN-SOURCEYes-
https://github.com/nextcloud/nextcloud_announcementsOPEN-SOURCEYes-
https://github.com/nextcloud/notificationsOPEN-SOURCEYes-
https://github.com/nextcloud/password_policyOPEN-SOURCEYes-
https://github.com/nextcloud/photosOPEN-SOURCEYes-
https://github.com/nextcloud/privacyOPEN-SOURCEYes-
https://github.com/nextcloud/recommendationsOPEN-SOURCEYes-
https://github.com/nextcloud/related_resourcesOPEN-SOURCEYes-
https://github.com/nextcloud/serverOPEN-SOURCEYes-
https://github.com/nextcloud/serverinfoOPEN-SOURCEYes-
https://github.com/nextcloud/survey_clientOPEN-SOURCEYes-
https://github.com/nextcloud/suspicious_loginOPEN-SOURCEYes-
https://github.com/nextcloud/textOPEN-SOURCEYes-
https://github.com/nextcloud/twofactor_totpOPEN-SOURCEYes-
https://github.com/nextcloud/updaterOPEN-SOURCEYes-
https://github.com/nextcloud/user_samlOPEN-SOURCEYes-
https://github.com/nextcloud/viewerOPEN-SOURCEYes-
Out-of-Scope Assets (4)
AssetCategoryBounty
Any asset that is not explicitly included in our program's scopeOTHERYes
Any depreciated versions and other versions than the current stable/official version are considered out of scope except if specified otherwise in the program’s rulesOTHERYes
Any local implementation of the project/implementation belonging to third partiesOTHERYes
Any third parties’ or Community’s assets that are not explicitly included (e.g. forks, libraries or packages)OTHERYes
Scope Changes (91)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedhttps://github.com/nextcloud/password_policyCODEIn Scope19:08
Addedhttps://github.com/nextcloud/survey_clientCODEIn Scope19:08
Addedhttps://github.com/nextcloud/textCODEIn Scope19:08
Addedhttps://github.com/nextcloud/updaterCODEIn Scope19:08
Addedany local implementation of the project/implementation belonging to third partiesOTHEROut of Scope19:08
Addedhttps://github.com/nextcloud/suspicious_loginCODEIn Scope19:08
Addedhttps://github.com/nextcloud/user_samlCODEIn Scope19:08
Addedhttps://github.com/nextcloud/viewerCODEIn Scope19:08
Addedhttps://github.com/nextcloud/bruteforcesettingsCODEIn Scope19:08
Addedhttps://github.com/nextcloud/nextcloud_announcementsCODEIn Scope19:08
Addedany depreciated versions and other versions than the current stable/official version are considered out of scope except if specified otherwise in the program’s rulesOTHEROut of Scope19:08
Addedhttps://github.com/nextcloud/circlesCODEIn Scope19:08
Addedhttps://github.com/nextcloud/files_pdfviewerCODEIn Scope19:08
Addedhttps://github.com/nextcloud/firstrunwizardCODEIn Scope19:08
Addedhttps://github.com/nextcloud/notificationsCODEIn Scope19:08
Addedhttps://github.com/nextcloud/recommendationsCODEIn Scope19:08
Addedhttps://github.com/nextcloud/androidCODEIn Scope19:08
Addedhttps://github.com/nextcloud/serverCODEIn Scope19:08
Addedhttps://github.com/nextcloud/serverinfoCODEIn Scope19:08
Addedhttps://github.com/nextcloud/logreaderCODEIn Scope19:08
Addedhttps://github.com/nextcloud/privacyCODEIn Scope19:08
Addedhttps://github.com/nextcloud/related_resourcesCODEIn Scope19:08
Addedhttps://github.com/nextcloud/iosCODEIn Scope19:08
Addedhttps://github.com/nextcloud/twofactor_totpCODEIn Scope19:08
Addedhttps://github.com/nextcloud/desktopCODEIn Scope19:08
Addedany asset that is not explicitly included in our program's scopeOTHEROut of Scope19:08
Addedany third parties’ or community’s assets that are not explicitly included (e.g. forks, libraries or packages)OTHEROut of Scope19:08
Addedhttps://github.com/nextcloud/activityCODEIn Scope19:08
Addedhttps://github.com/nextcloud/photosCODEIn Scope19:08
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedhttps://github.com/nextcloud/suspicious_loginCODEIn Scope00:52
Addedhttps://github.com/nextcloud/desktopCODEIn Scope00:52
Addedany third parties’ or community’s assets that are not explicitly included (e.g. forks, libraries or packages)OTHEROut of Scope00:52
Addedany depreciated versions and other versions than the current stable/official version are considered out of scope except if specified otherwise in the program’s rulesOTHEROut of Scope00:52
Addedhttps://github.com/nextcloud/recommendationsCODEIn Scope00:52
Addedhttps://github.com/nextcloud/serverinfoCODEIn Scope00:52
Addedhttps://github.com/nextcloud/iosCODEIn Scope00:52
Addedhttps://github.com/nextcloud/serverCODEIn Scope00:52
Addedhttps://github.com/nextcloud/password_policyCODEIn Scope00:52
Addedhttps://github.com/nextcloud/bruteforcesettingsCODEIn Scope00:52
Addedhttps://github.com/nextcloud/privacyCODEIn Scope00:52
Addedhttps://github.com/nextcloud/related_resourcesCODEIn Scope00:52
Addedhttps://github.com/nextcloud/updaterCODEIn Scope00:52
Addedhttps://github.com/nextcloud/activityCODEIn Scope00:52
Addedhttps://github.com/nextcloud/nextcloud_announcementsCODEIn Scope00:52
Addedhttps://github.com/nextcloud/user_samlCODEIn Scope00:52
Addedhttps://github.com/nextcloud/files_pdfviewerCODEIn Scope00:52
Addedhttps://github.com/nextcloud/firstrunwizardCODEIn Scope00:52
Addedhttps://github.com/nextcloud/survey_clientCODEIn Scope00:52
Addedhttps://github.com/nextcloud/textCODEIn Scope00:52
Addedhttps://github.com/nextcloud/viewerCODEIn Scope00:52
Addedany local implementation of the project/implementation belonging to third partiesOTHEROut of Scope00:52
Addedhttps://github.com/nextcloud/logreaderCODEIn Scope00:52
Addedhttps://github.com/nextcloud/notificationsCODEIn Scope00:52
Addedhttps://github.com/nextcloud/photosCODEIn Scope00:52
Addedany asset that is not explicitly included in our program's scopeOTHEROut of Scope00:52
Addedhttps://github.com/nextcloud/circlesCODEIn Scope00:52
Addedhttps://github.com/nextcloud/twofactor_totpCODEIn Scope00:52
Addedhttps://github.com/nextcloud/androidCODEIn Scope00:52
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedany local implementation of the project/implementation belonging to third partiesOTHEROut of Scope21:40
Removedhttps://github.com/nextcloud/desktopOPEN-SOURCEIn Scope21:40
Removedany asset that is not explicitly included in our program's scopeOTHEROut of Scope21:40
Removedany third parties’ or community’s assets that are not explicitly included (e.g. forks, libraries or packages)OTHEROut of Scope21:40
Removedany depreciated versions and other versions than the current stable/official version are considered out of scope except if specified otherwise in the program’s rulesOTHEROut of Scope21:40
Removedhttps://github.com/nextcloud/serverOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/activityOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/bruteforcesettingsOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/circlesOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/files_pdfviewerOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/firstrunwizardOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/logreaderOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/nextcloud_announcementsOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/notificationsOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/password_policyOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/photosOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/privacyOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/recommendationsOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/related_resourcesOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/serverinfoOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/survey_clientOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/suspicious_loginOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/textOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/twofactor_totpOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/updaterOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/user_samlOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/viewerOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/androidOPEN-SOURCEIn Scope21:40
Removedhttps://github.com/nextcloud/iosOPEN-SOURCEIn Scope21:40
Addedany third parties’ or community’s assets that are not explicitly included (e.g. forks, libraries or packages)OTHEROut of Scope00:33
Addedany depreciated versions and other versions than the current stable/official version are considered out of scope except if specified otherwise in the program’s rulesOTHEROut of Scope00:33
Addedany local implementation of the project/implementation belonging to third partiesOTHEROut of Scope00:33
Addedany asset that is not explicitly included in our program's scopeOTHEROut of Scope00:33