Logback-core vulnerabilities
2 known vulnerabilities in Logback-core from QOS.CH Sarl. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.0average CVSS score
Latest first
- 7.0 High severity
ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to…
ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.36 in Java applications, allows an attacker to execute arbitrary code circumventing existing protections against CVE-2025-11226 by compromisin
- 7.0 High severity
ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to…
ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting a