diff --git a/configs/workhorse/nextcloud.nix b/configs/workhorse/nextcloud.nix
index 56a51b1..be4f76b 100644
--- a/configs/workhorse/nextcloud.nix
+++ b/configs/workhorse/nextcloud.nix
@@ -7,6 +7,9 @@ let
 
 in {
 
+  #  Nextcloud 19 is still supported, but CVE-2020-8259 & CVE-2020-8152 are unfixed!
+  nixpkgs.config.permittedInsecurePackages = [ "nextcloud-19.0.6" ];
+
   containers.nextcloud = {
 
     # mount host folders