Known vulnerabilities in Logback

Vendor: QOS.ch
Software: Logback
Software CPE: cpe:2.3:a:qos.ch:logback:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Logback Logback is affected by 8 known vulnerabilities: 1 high, 5 medium, 2 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137751 - Deserialization of Untrusted Data
CVE-2026-9828
CWE-502 Medium
No
No
1.5.33 15.07.2026 SB2026071556
SB2026071557
SB2026071559
#VU123671 - Improper input validation
CVE-2026-1225
CWE-20 Low
No
No
1.5.25 10.03.2026 SB2026031035
SB2026031036
SB2026031041
and 6 more
#VU116684 - Improper input validation
CVE-2025-11226
CWE-20 Medium
No
No
1.5.19 07.10.2025 SB2025100745
SB2025100746
SB2025112108
and 19 more
#VU103290 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-12801
CWE-611 Medium
No
No
1.3.15, 1.5.13 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 23 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798
CWE-94 Low
No
No
1.3.15, 1.5.13 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU85618 - Deserialization of Untrusted Data
CVE-2023-6378
CWE-502 Medium
No
No
1.3.14, 1.4.14 19.01.2024 SB2024011926
SB2024011927
SB2024012316
and 39 more
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550
CWE-94 Medium
No
No
1.2.9, 1.3.0 alpha11 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more
#VU26418 - Deserialization of Untrusted Data
CVE-2017-5929
CWE-502 High
No
No
1.2.0 27.03.2020 SB2017031302
SB2020032701
SB2022101720
and 1 more