Skip to content
OpenAdvisories

Product · QOS.CH Sarl

Logback-core

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.8
    CVE-2026-1225

    Malicious logback.xml configuration file allows instantiation of arbitrary classes

    ACE vulnerability in configuration file processing by QOS.CH logback-core up to and including version 1.5.24 in Java applications, allows an attacker to instantiate classes already present on the class path by compromising an existing logback configuration fi…

    QOS.CH Sarl Logback-core trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven