ch.qos.logback:logback-core vulnerabilities (TuxCare)

7 vulnerabilities.

• ch.qos.logback:logback-core TuxCare Logback deserialization whitelist bypass for Proxy objects CVE-2026-10532 Fix available 2.9 LowJune 1, 2026
• ch.qos.logback:logback-core TuxCare Malicious logback.xml configuration file allows instantiation of arbitrary classes CVE-2026-1225 Fix available 1.8 LowJanuary 22, 2026
• ch.qos.logback:logback-core TuxCare Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino CVE-2025-11226 Fix available 7.0 HighOctober 1, 2025
• ch.qos.logback:logback-core TuxCare SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks CVE-2024-12801 Fix available 2.4 LowDecember 19, 2024
• ch.qos.logback:logback-core TuxCare JaninoEventEvaluator vulnerability CVE-2024-12798 Fix available 5.9 MediumDecember 19, 2024
• ch.qos.logback:logback-core TuxCare Logback "receiver" DOS vulnerability CVE-2023-6378 Fix available 7.1 HighNovember 29, 2023
• ch.qos.logback:logback-core TuxCare QOS.ch Logback vulnerable to Deserialization of Untrusted Data CVE-2017-5929 Fix available 9.8 CriticalMarch 13, 2017