logback vulnerabilities (openSUSE)
12 vulnerabilities.
-
logbackopenSUSE Logback: Incomplete protection against CVE-2026-19880 6.3 Medium -
logbackopenSUSE Incomplete protection against CVE-2025-11226 6.3 Medium -
logbackopenSUSE Incomplete protection against CVE-2025-11226 7.0 High -
logbackopenSUSE Logback deserialization whitelist bypass for Proxy objects 2.9 Low -
logbackopenSUSE Logback deserialization whitelist bypass for java.lang and java.util 2.9 Low -
logbackopenSUSE Malicious logback.xml configuration file allows instantiation of arbitrary classes 1.8 Low -
logbackopenSUSE Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino 7.0 High -
logbackopenSUSE SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks 2.4 Low -
logbackopenSUSE JaninoEventEvaluator vulnerability 5.9 Medium -
logbackopenSUSE Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix 7.1 High -
logbackopenSUSE Logback "receiver" DOS vulnerability 7.1 High -
logbackopenSUSE Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints 10.0 Critical