Known vulnerabilities in Logback 1.3.0-alpha14

Vendor: QOS.ch
Software: Logback
Version: 1.3.0-alpha14
Software CPE: cpe:2.3:a:qos.ch:logback:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Logback version 1.3.0-alpha14 Logback 1.3.0-alpha14 is affected by 5 vulnerabilities: 3 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137751 - Deserialization of Untrusted Data
CVE-2026-9828
CWE-502 Medium
No
No
1.5.33 15.07.2026 SB2026071556
SB2026071557
SB2026071559
#VU123671 - Improper input validation
CVE-2026-1225
CWE-20 Low
No
No
1.5.25 10.03.2026 SB2026031035
SB2026031036
SB2026031041
and 6 more
#VU103290 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-12801
CWE-611 Medium
No
No
1.3.15, 1.5.13 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 23 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798
CWE-94 Low
No
No
1.3.15, 1.5.13 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU85618 - Deserialization of Untrusted Data
CVE-2023-6378
CWE-502 Medium
No
No
1.3.14, 1.4.14 19.01.2024 SB2024011926
SB2024011927
SB2024012316
and 39 more