Skip to content
OpenAdvisories

Package · Wolfi

dependency-track

45 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.9
    CVE-2026-10532

    Logback deserialization whitelist bypass for Proxy objects

    Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to Si…

    QOS.CH Sarl logback thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  • Low 2.9
    CVE-2026-9828

    Logback deserialization whitelist bypass for java.lang and java.util

    Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to Sim…

    QOS.CH Sarl logback trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  • Low 3.7
    CVE-2025-11143

    org.eclipse.jetty:jetty-http has different parsing of invalid URIs

    The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list…

    Eclipse Foundation Eclipse Jetty druid trino Debian Ubuntu Wolfi Maven
  • Low 1.8
    CVE-2026-1225

    Malicious logback.xml configuration file allows instantiation of arbitrary classes

    ACE vulnerability in configuration file processing by QOS.CH logback-core up to and including version 1.5.24 in Java applications, allows an attacker to instantiate classes already present on the class path by compromising an existing logback configuration fi…

    QOS.CH Sarl Logback-core trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven