If you’re running the latest version of Nextcloud (27.1.3) this is already patched.

is this for the PHP version or the new Golang version?

More like ownedCloud

Has anyone found a reference for which ownCloud versions are affected/patched? Recent release notes don’t mention these vulnerabilities.

Does anyone know which version of OwnCloud is patched? e.g 10.13.0

This is why it’s important to have other security monitoring resources on your network if you intend to open ports or expose your services to the Internet. Also a good time to change all your passwords if you have not already.