ch.qos.logback:logback-access (0.9.25), ch.qos.logback:logback-classic (0.9.25) +8 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.25)

ch.qos.logback:logback-core MAVEN version 0.9.25 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.25 - ch.qos.logback:logback-classic 0.9.25 -...

ch.qos.logback:logback-access (0.9.14), ch.qos.logback:logback-classic (0.9.14) +13 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.14)

ch.qos.logback:logback-core MAVEN version 0.9.14 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.14 - ch.qos.logback:logback-classic 0.9.14 -...

ch.qos.logback:logback-access (0.3), ch.qos.logback:logback-classic (0.3) potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.3)

ch.qos.logback:logback-core MAVEN version 0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.3 - ch.qos.logback:logback-classic 0.3 Source cves: CVE-2021-42550 Source...

ch.qos.logback:logback-access (0.9.15), ch.qos.logback:logback-classic (0.9.15) +72 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.15)

ch.qos.logback:logback-core MAVEN version 0.9.15 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.15 - ch.qos.logback:logback-classic 0.9.15 -...

ch.qos.logback:logback-access (>=${parent.version}, <=0.2.5), ch.qos.logback:logback-classic (0.2.5) potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.2.5)

ch.qos.logback:logback-core MAVEN version 0.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access =$parent.version, =0.2.5 - ch.qos.logback:logback-classic 0.2.5 Source cves...

ch.hortis.sonar:sonar-commons (0.2), ch.hortis.sonar:sonar-maven-plugin (0.2) +4 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.5)

ch.qos.logback:logback-core MAVEN version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.hortis.sonar:sonar-commons 0.2 - ch.hortis.sonar:sonar-maven-plugin 0.2 - ch.qos.logback:log4j-bridge...

ch.qos.logback:logback-access (0.9.26), ch.qos.logback:logback-classic (0.9.26) +126 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.26)

ch.qos.logback:logback-core MAVEN version 0.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.26 - ch.qos.logback:logback-classic 0.9.26 -...

ch.qos.logback:logback-access (0.9.24), ch.qos.logback:logback-classic (0.9.24) +69 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.24)

ch.qos.logback:logback-core MAVEN version 0.9.24 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.24 - ch.qos.logback:logback-classic 0.9.24 -...

ch.qos.logback:logback-access (0.6), ch.qos.logback:logback-classic (0.6) +1 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.6)

ch.qos.logback:logback-core MAVEN version 0.6 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.6 - ch.qos.logback:logback-classic 0.6 - ch.qos.logback:logback-examples 0....

aero.champ:cargojson (1.0), africa.absa:inception-application (>=1.0.0, <=1.0.1) +46248 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (>=1.0.0, <=1.2.8)

ch.qos.logback:logback-core MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.3.0, =0.2, =0.2, =0.2, =0.2, =0.2, =0.11 and more Source cves: CVE-2021-42550 Source advisory: GHSA-668Q-QRV7-99FM...

Deserialization of Untrusted Data in logback

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...

ch.qos.logback:logback-access (0.9.27), ch.qos.logback:logback-classic (0.9.27) +34 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.27)

ch.qos.logback:logback-core MAVEN version 0.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.27 - ch.qos.logback:logback-classic 0.9.27 -...

GHSA-668Q-QRV7-99FM Deserialization of Untrusted Data in logback

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...

ch.qos.logback:logback-access (0.9.9), ch.qos.logback:logback-classic (0.9.9) +40 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.9)

ch.qos.logback:logback-core MAVEN version 0.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.9 - ch.qos.logback:logback-classic 0.9.9 -...

ch.qos.logback:logback-access (0.5), ch.qos.logback:logback-classic (0.5) potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.5)

ch.qos.logback:logback-core MAVEN version 0.5 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.5 - ch.qos.logback:logback-classic 0.5 Source cves: CVE-2021-42550 Source...

br.com.objectos:boleto (0.1.0), br.com.objectos:bvmf (>=0.1.0, <=0.1.1) +191 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.29)

ch.qos.logback:logback-core MAVEN version 0.9.29 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - br.com.objectos:boleto 0.1.0 - br.com.objectos:bvmf =0.1.0, =0.1.0, =0.4.0 -...

ch.qos.logback:logback-access (0.9.13), ch.qos.logback:logback-classic (0.9.13) +1 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.13)

ch.qos.logback:logback-core MAVEN version 0.9.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.13 - ch.qos.logback:logback-classic 0.9.13 -...

ch.qos.logback:logback-access (0.9.16), ch.qos.logback:logback-classic (0.9.16) +12 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.9.16)

ch.qos.logback:logback-core MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.16 - ch.qos.logback:logback-classic 0.9.16 -...

ch.qos.logback:log4j-bridge (0.8), ch.qos.logback:logback-access (0.8) +2 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.8)

ch.qos.logback:logback-core MAVEN version 0.8 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.8 - ch.qos.logback:logback-access 0.8 - ch.qos.logback:logback-classic 0.8 -...

ch.qos.logback:log4j-bridge (0.7.1), ch.qos.logback:logback-access (0.7.1) +2 more potentially affected by CVE-2021-42550 via ch.qos.logback:logback-core (0.7.1)

ch.qos.logback:logback-core MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:log4j-bridge 0.7.1 - ch.qos.logback:logback-access 0.7.1 - ch.qos.logback:logback-classic...