LO
Product
logback
3
CVEs
0
On KEV
2.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 3
Watch
Add logback to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-10532 | 2.9 | Jun 1 | Logback deserialization whitelist bypass for Proxy objects Affected: through 1.5.33 |
| CVE-2026-9828 | 2.9 | May 28 | Logback deserialization whitelist bypass for java.lang and java.util Affected: through 1.5.32 |
| CVE-2024-12801 | 2.4 | Dec 19 | SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks Affected: 0.1 through 1.3.14; 1.4.0 through 1.5.12 |
Showing 3