This app is part of Collabora Online and follows its security policy: https://github.com/CollaboraOnline/online/blob/main/SECURITY.md

Only the latest release of the app is supported. Fixes ship as a new release on the Nextcloud app store.

Email officesecurity@lists.freedesktop.org. Please do not open a public issue.