Phew, nextcloud and freshrss both have updates to resolve the vulnerability. Furiously logs in to update