Invisible Salamanders Attack against end_to_end_encryption in Nextcloud

Summary

We’re considering this a non-issue at the moment because the Invisible Salamanders attack requires the attacker to be an insider with an in-depth understanding of the attack mechanics and access to both keys. That is unlikely to occur in practice and falls outside the scope of our threat model. Additionally, the report does not include sufficient reproduction steps in a real world scenario, which limits our ability to validate the claim effectively.