Skip to content
OpenAdvisories

Package · Debian

logback

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.0
    CVE-2026-13006

    Incomplete protection against CVE-2025-11226

    ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.36 in Java applications, allows an attacker to execute arbitrary code circumventing existing protections against CVE-2025-11226 by compromisi…

    QOS.CH Sarl Logback-core logback logback Debian Ubuntu
  • High 7.0
    CVE-2025-11226

    Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino

    ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting …

    QOS.CH Sarl Logback-core logback logback Debian Ubuntu Maven
  • High 7.1
    CVE-2023-6378

    Logback "receiver" DOS vulnerability

    A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

    QOS.CH Sarl logback logback logback Debian Ubuntu Maven