ch.qos.logback:logback-access (0.9.10), ch.qos.logback:logback-classic (0.9.10) +1 more potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (0.9.10)

ch.qos.logback:logback-core MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.10 - ch.qos.logback:logback-classic 0.9.10 -...

ch.qos.logback:log4j-bridge (0.9.6), ch.qos.logback:logback-access (0.9.6) +4 more potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (0.9.6)

ch.qos.logback:logback-core MAVEN version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.6 - ch.qos.logback:logback-access 0.9.6 - ch.qos.logback:logback-classic...

ch.qos.logback:logback-access (0.9.23), ch.qos.logback:logback-classic (0.9.23) +1 more potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (0.9.23)

ch.qos.logback:logback-core MAVEN version 0.9.23 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.23 - ch.qos.logback:logback-classic 0.9.23 -...

ch.qos.logback:logback-access (0.9.13), ch.qos.logback:logback-classic (0.9.13) +1 more potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (0.9.13)

ch.qos.logback:logback-core MAVEN version 0.9.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.13 - ch.qos.logback:logback-classic 0.9.13 -...

ch.qos.logback:logback-access (0.9.27), ch.qos.logback:logback-classic (0.9.27) +34 more potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (0.9.27)

ch.qos.logback:logback-core MAVEN version 0.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.27 - ch.qos.logback:logback-classic 0.9.27 -...

ch.qos.logback:logback-access (0.5), ch.qos.logback:logback-classic (0.5) potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (0.5)

ch.qos.logback:logback-core MAVEN version 0.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.5 - ch.qos.logback:logback-classic 0.5 Source cves: CVE-2025-11226 Source...

ch.qos.logback:logback-access (0.6), ch.qos.logback:logback-classic (0.6) +1 more potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (0.6)

ch.qos.logback:logback-core MAVEN version 0.6 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.6 - ch.qos.logback:logback-classic 0.6 - ch.qos.logback:logback-examples 0....

ch.qos.logback:logback-access (0.9.28), ch.qos.logback:logback-classic (0.9.28) +113 more potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (0.9.28)

ch.qos.logback:logback-core MAVEN version 0.9.28 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.28 - ch.qos.logback:logback-classic 0.9.28 -...

ch.qos.logback:logback-access (0.9.12), ch.qos.logback:logback-classic (0.9.12) +1 more potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (0.9.12)

ch.qos.logback:logback-core MAVEN version 0.9.12 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.12 - ch.qos.logback:logback-classic 0.9.12 -...

ch.qos.logback:logback-access (0.9.18), ch.qos.logback:logback-classic (0.9.18) +45 more potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (0.9.18)

ch.qos.logback:logback-core MAVEN version 0.9.18 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.18 - ch.qos.logback:logback-classic 0.9.18 -...

ch.qos.logback:logback-access (0.9.11), ch.qos.logback:logback-classic (0.9.11) +2 more potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (0.9.11)

ch.qos.logback:logback-core MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.11 - ch.qos.logback:logback-classic 0.9.11 -...

ch.qos.logback:logback-access (0.9.17), ch.qos.logback:logback-classic (0.9.17) +21 more potentially affected by CVE-2025-11226 via ch.qos.logback:logback-core (0.9.17)

ch.qos.logback:logback-core MAVEN version 0.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.17 - ch.qos.logback:logback-classic 0.9.17 -...

Malware in logback-classic

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in logback-classic (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfdbf897b4e05812cf41e2452ff954fd4ccd831b4ac8a6f7ecae4371674f5436 Any computer that has this package installed or running should be considered...

MAL-2025-6102 Malicious code in logback-classic (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfdbf897b4e05812cf41e2452ff954fd4ccd831b4ac8a6f7ecae4371674f5436 Any computer that has this package installed or running should be considered...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in logback-classic

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of logback-classic Vulnerability Details CVEID:CVE-2024-12798 DESCRIPTION: ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in logback-classic [CVE-2024-12798]

Summary IBM Watson Speech Services Cartridge is vulnerable to a denial of service in logback-classic, caused by a flaw in the JaninoEventEvaluator extension CVE-2024-12798. Logback-classic is used by our Speech Microservices. This vulnerabilitiy has been addressed. Please read the details for...

ch.qos.logback:logback-access (0.9.26), ch.qos.logback:logback-classic (0.9.26) +126 more potentially affected by CVE-2024-12798 via ch.qos.logback:logback-core (0.9.26)

ch.qos.logback:logback-core MAVEN version 0.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.26 - ch.qos.logback:logback-classic 0.9.26 -...

ch.qos.logback:logback-access (0.9.14), ch.qos.logback:logback-classic (0.9.14) +13 more potentially affected by CVE-2024-12801 via ch.qos.logback:logback-core (0.9.14)

ch.qos.logback:logback-core MAVEN version 0.9.14 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.14 - ch.qos.logback:logback-classic 0.9.14 -...

ch.qos.logback:log4j-bridge (0.9.1), ch.qos.logback:logback-access (0.9.1) +2 more potentially affected by CVE-2024-12798 via ch.qos.logback:logback-core (0.9.1)

ch.qos.logback:logback-core MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.9.1 - ch.qos.logback:logback-access 0.9.1 - ch.qos.logback:logback-classic...