The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploaded to a public share) are supposed to be deleted upon detection.
https://owncloud.com/security-advisories/cve-2021-33828/
https://doc.owncloud.com/server/admin_manual/release_notes.html