If you’re running the latest version of Nextcloud (27.1.3) this is already patched.

Has anyone found a reference for which ownCloud versions are affected/patched? Recent release notes don’t mention these vulnerabilities.

More like ownedCloud

is this for the PHP version or the new Golang version?

Does anyone know which version of OwnCloud is patched? e.g 10.13.0

This is why it’s important to have other security monitoring resources on your network if you intend to open ports or expose your services to the Internet. Also a good time to change all your passwords if you have not already.