ch.qos.logback:logback-examples (0.9.15), com.github.kennycyb:java-ui-factory-core (0.4) +71 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.15)

ch.qos.logback:logback-classic MAVEN version 0.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.15 - com.github.kennycyb:java-ui-factory-core 0.4 -...

ch.qos.logback:logback-examples (0.9.26), com.axibase:aggregation-log-filter (>=0.1.1, <=0.4.13) +118 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.26)

ch.qos.logback:logback-classic MAVEN version 0.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.26 - com.axibase:aggregation-log-filter =0.1.1, =1.0.3, =0.3.1...

ch.qos.logback:logback-access (0.9.14), ch.qos.logback:logback-classic (0.9.14) +13 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.9.14)

ch.qos.logback:logback-core MAVEN version 0.9.14 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.14 - ch.qos.logback:logback-classic 0.9.14 -...

ch.qos.logback:logback-examples (0.9.13) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.13)

ch.qos.logback:logback-classic MAVEN version 0.9.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.13 Source cves: CVE-2017-5929 Source advisory:...

ch.qos.logback:logback-access (0.5), ch.qos.logback:logback-classic (0.5) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.5)

ch.qos.logback:logback-core MAVEN version 0.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.5 - ch.qos.logback:logback-classic 0.5 Source cves: CVE-2017-5929 Source...

ch.qos.logback:logback-examples (0.9.10) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.10)

ch.qos.logback:logback-classic MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.10 Source cves: CVE-2017-5929 Source advisory:...

ch.qos.logback:logback-access (>=${parent.version}, <=0.2.5), ch.qos.logback:logback-classic (0.2.5) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.2.5)

ch.qos.logback:logback-core MAVEN version 0.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access =$parent.version, =0.2.5 - ch.qos.logback:logback-classic 0.2.5 Source cves...

ch.qos.logback:logback-examples (0.9.16), de.huxhorn.lilith:de.huxhorn.lilith (0.9.36) +7 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.16)

ch.qos.logback:logback-classic MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.16 - de.huxhorn.lilith:de.huxhorn.lilith 0.9.36 -...

ch.qos.logback:logback-examples (0.9.22) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.22)

ch.qos.logback:logback-classic MAVEN version 0.9.22 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.22 Source cves: CVE-2017-5929 Source advisory:...

ch.qos.logback:logback-examples (0.9.25), com.cyrusinnovation:stubble-core_2.10 (0.0.3) +6 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.9.25)

ch.qos.logback:logback-classic MAVEN version 0.9.25 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.9.25 - com.cyrusinnovation:stubble-core2.10 0.0.3 -...

ch.qos.logback:log4j-bridge (0.8.1), ch.qos.logback:logback-access (0.8.1) +2 more potentially affected by CVE-2017-5929 via ch.qos.logback:logback-core (0.8.1)

ch.qos.logback:logback-core MAVEN version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.8.1 - ch.qos.logback:logback-access 0.8.1 - ch.qos.logback:logback-classic...

ch.qos.logback:logback-examples (0.6) potentially affected by CVE-2017-5929 via ch.qos.logback:logback-classic (0.6)

ch.qos.logback:logback-classic MAVEN version 0.6 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:logback-examples 0.6 Source cves: CVE-2017-5929 Source advisory: OSV:GHSA-VMFG-RJJM-RJ...

GHSA-VMFG-RJJM-RJRJ QOS.ch Logback vulnerable to Deserialization of Untrusted Data

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components. The RemoteStreamAppenderClient class in logback-classic and the SocketNode classes in logback-classic and logback-access allow data to be deserialized over a Java Socket,...