A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share they received.
nextcloud nextcloud server