Skip to content
OpenAdvisories

Package · Wolfi

nextflow

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.9
    CVE-2026-10532

    Logback deserialization whitelist bypass for Proxy objects

    Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to Si…

    QOS.CH Sarl logback thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  • Low 2.9
    CVE-2026-9828

    Logback deserialization whitelist bypass for java.lang and java.util

    Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to Sim…

    QOS.CH Sarl logback trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  • Low 1.8
    CVE-2026-1225

    Malicious logback.xml configuration file allows instantiation of arbitrary classes

    ACE vulnerability in configuration file processing by QOS.CH logback-core up to and including version 1.5.24 in Java applications, allows an attacker to instantiate classes already present on the class path by compromising an existing logback configuration fi…

    QOS.CH Sarl Logback-core trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven