QS
Vendor
QOS.CH Sarl
9
CVEs
0
On KEV
1
New 30D
Products
LO6.3
Logback-classic
QOS.CH Sarl
2 CVEs0 on KEV1 new
LO7.0
Logback-core
QOS.CH Sarl
4 CVEs0 on KEV0 new
LO2.9
logback
QOS.CH Sarl
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104721 | LO Logback-classic QOS.CH Sarl | 6.3 | Oct 2 | Logback: Incomplete protection against CVE-2026-19880 |
| CVE-2026-19880 | LO Logback-classic QOS.CH Sarl | 6.3 | Aug 14 | Incomplete protection against CVE-2025-11226 |
| CVE-2026-13006 | LO Logback-core QOS.CH Sarl | 7.0 | Jun 24 | Incomplete protection against CVE-2025-11226 |
| CVE-2026-10532 | LO logback QOS.CH Sarl | 2.9 | Jun 1 | Logback deserialization whitelist bypass for Proxy objects |
| CVE-2026-9828 | LO logback QOS.CH Sarl | 2.9 | May 28 | Logback deserialization whitelist bypass for java.lang and java.util |
| CVE-2026-1225 | LO Logback-core QOS.CH Sarl | 1.8 | Jan 22 | Malicious logback.xml configuration file allows instantiation of arbitrary classes |
| CVE-2025-11226 | LO Logback-core QOS.CH Sarl | 7.0 | Oct 1 | Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino |
| CVE-2024-12801 | LO logback QOS.CH Sarl | 2.4 | Dec 19 | SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks |
| CVE-2024-12798 | LO Logback-core QOS.CH Sarl | 5.9 | Dec 19 | JaninoEventEvaluator vulnerability |