pkg:Maven/ch.qos.logback:logback-core

All known vulnerabilities

• CRITICAL9.8CVE-2017-5929logback - security update
  from 0, < 1.2.0
• HIGH7.1CVE-2023-6481Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data
  >= 1.4.13, < 1.4.14
• HIGH7.1CVE-2023-6378logback serialization vulnerability
  >= 1.3.0, < 1.3.12
• MEDIUM6.6Deserialization of Untrusted Data in logback
  from 0, < 1.2.9
• —Logback vulnerable to Object Injection through HardenedObjectInputStream modules
  from 0, < 1.5.34
• —QOS.CH Sarl logback logback-core has a deserialization of untrusted data vulnerability
  from 0, < 1.5.33
• —Logback allows an attacker to instantiate classes already present on the class path
  from 0, < 1.5.25
• —QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processing
  >= 1.4.0, < 1.5.19
• —QOS.CH logback-core Server-Side Request Forgery vulnerability
  >= 1.4.0, < 1.5.13
• —QOS.CH logback-core Expression Language Injection vulnerability
  >= 1.4.0, < 1.5.13