qos-ch/logback Security Advisories | GitStock

low2026-06-01

Logback vulnerable to Object Injection through HardenedObjectInputStream modules

GHSA-jhq6-gfmj-v8fx · CVE-2026-10532

low2026-05-28

QOS.CH Sarl logback logback-core has a deserialization of untrusted data vulnerability

GHSA-p47f-322f-whfh · CVE-2026-9828

low2026-01-22

Logback allows an attacker to instantiate classes already present on the class path

GHSA-qqpg-mvqg-649v · CVE-2026-1225

medium2025-10-01

QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processing

GHSA-25qh-j22f-pwp8 · CVE-2025-11226

medium2024-12-19

QOS.CH logback-core Expression Language Injection vulnerability

GHSA-pr98-23f8-jwxv · CVE-2024-12798

low2024-12-19

QOS.CH logback-core Server-Side Request Forgery vulnerability

GHSA-6v67-2wr5-gvf4 · CVE-2024-12801

high2023-12-04

Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data

GHSA-gm62-rw4g-vrc4 · CVE-2023-6481

high2023-11-29

logback serialization vulnerability

GHSA-vmq6-5m68-f53m · CVE-2023-6378

medium2021-12-17

Deserialization of Untrusted Data in logback

GHSA-668q-qrv7-99fm · CVE-2021-42550