How many CVEs have patched sendMessages?

1 published CVEs changed sendMessages in nextcloud/spreed, in 1 distinct patches totalling 15 changed lines, between 2026 and 2026.

What is the latest CVE that changed sendMessages?

CVE-2026-45266 (Nextcloud: Unauthorized force-mute from missing permission check when using internal signaling), published 2026-06-01, changed lines 392 to 406 of lib/Controller/SignalingController.php.

How does sendMessages compare to the rest of nextcloud/spreed?

nextcloud/spreed has 13 CVEs with a located fix in total; 1 of them changed sendMessages.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

RadicalNotion.AI

Log in Create an account

nextcloud/spreed

Function

sendMessages

Name: sendMessages in nextcloud/spreed: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

lib/Controller/SignalingController.php

Last patched June 1, 2026

1

CVEs

That changed this function

1

Distinct patches

Backports counted once

15

Lines changed

Added plus removed

2026

Years

By CVE publication date

Overview

sendMessages in nextcloud/spreed was changed by 1 published CVE fixes in 2026, in 1 distinct patches that added or removed 15 lines in total.

nextcloud/spreed has 13 CVEs with a located fix in total, so 8% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed sendMessages, newest first, with the lines each fix touched.

Nextcloud: Unauthorized force-mute from missing permission check when using internal signaling
CVE-2026-45266 · lines 392–406 · +9 −6
Low · CVSS 3.5
EPSS 0.4%2026-06-01

Get an alert when the next CVE fix lands in nextcloud/spreed, with the patched functions.

Monitor spreed CVEs

Other functions in these files

Functions in the same file that CVE fixes also changed.

Other hotspots in the repository

Functions in nextcloud/spreed changed by the most CVE fixes.

joinRoom1 CVEs · lib/Controller/RoomController.php afterException1 CVEs · lib/Middleware/InjectionMiddleware.php __construct1 CVEs · lib/Controller/RoomController.php getSingleRoom1 CVEs · lib/Controller/RoomController.php BruteForceProtection1 CVEs · lib/Controller/RoomController.php __construct1 CVEs · lib/Controller/PageController.php

All patched functions in nextcloud/spreed

Frequently asked questions

Common questions about CVE fixes to sendMessages.

How many CVEs have patched sendMessages?: 1 published CVEs changed sendMessages in nextcloud/spreed, in 1 distinct patches totalling 15 changed lines, between 2026 and 2026.
What is the latest CVE that changed sendMessages?: CVE-2026-45266 (Nextcloud: Unauthorized force-mute from missing permission check when using internal signaling), published 2026-06-01, changed lines 392 to 406 of lib/Controller/SignalingController.php.
How does sendMessages compare to the rest of nextcloud/spreed?: nextcloud/spreed has 13 CVEs with a located fix in total; 1 of them changed sendMessages.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track nextcloud/spreed CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing