Skip to contentQos.ch Sarl Logback vulnerabilities
- qos.ch sarl logback-classicLogback: Incomplete protection against CVE-2026-19880CVE-2026-104721Fix available6.3 Medium
- qos.ch sarl logback-classicIncomplete protection against CVE-2025-11226CVE-2026-19880Fix available6.3 Medium
- qos.ch sarl logback-coreIncomplete protection against CVE-2025-11226CVE-2026-13006Fix available7.0 High
- qos.ch sarl logbackLogback deserialization whitelist bypass for Proxy objectsCVE-2026-10532Fix available2.9 Low
- qos.ch sarl logbackLogback deserialization whitelist bypass for java.lang and java.utilCVE-2026-9828Fix available2.9 Low
- qos.ch sarl logback-coreMalicious logback.xml configuration file allows instantiation of arbitrary classesCVE-2026-1225Fix available1.8 Low
- qos.ch sarl logback-coreConditional processing of logback.xml configuration file, in conjuction with Spring Framework and JaninoCVE-2025-11226Fix available7.0 High
- qos.ch sarl logbackSaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacksCVE-2024-12801Fix available2.4 Low
- qos.ch sarl logback-coreJaninoEventEvaluator vulnerabilityCVE-2024-12798Fix available5.9 Medium
- qos logbackLogback "receiver" DOS vulnerability CVE-2023-6378 incomplete fixCVE-2023-6481Fix available7.1 High
- qos logbackLogback "receiver" DOS vulnerabilityCVE-2023-6378Fix available7.1 High
- qos logback, netapp cloud manager, service level manager +3 more +5 moreRCE from attacker with configuration edit priviledges through JNDI lookupCVE-2021-42550Fix available6.6 Medium