ch.qos.logback:logback-access (0.9.16), ch.qos.logback:logback-classic (0.9.16) +12 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.16)

ch.qos.logback:logback-core MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.16 - ch.qos.logback:logback-classic 0.9.16 -...

ch.qos.logback:logback-access (0.9.17), ch.qos.logback:logback-classic (0.9.17) +21 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.17)

ch.qos.logback:logback-core MAVEN version 0.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.17 - ch.qos.logback:logback-classic 0.9.17 -...

ch.qos.logback:logback-access (0.9.18), ch.qos.logback:logback-classic (0.9.18) +45 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.18)

ch.qos.logback:logback-core MAVEN version 0.9.18 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.18 - ch.qos.logback:logback-classic 0.9.18 -...

ch.qos.logback:logback-access (0.9.19), ch.qos.logback:logback-classic (0.9.19) +17 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.19)

ch.qos.logback:logback-core MAVEN version 0.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.19 - ch.qos.logback:logback-classic 0.9.19 -...

ch.qos.logback:logback-access (0.9.20), ch.qos.logback:logback-classic (0.9.20) +25 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.20)

ch.qos.logback:logback-core MAVEN version 0.9.20 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.20 - ch.qos.logback:logback-classic 0.9.20 -...

ch.qos.logback:logback-access (0.9.21), ch.qos.logback:logback-classic (0.9.21) +22 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.21)

ch.qos.logback:logback-core MAVEN version 0.9.21 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.21 - ch.qos.logback:logback-classic 0.9.21 -...

ch.qos.logback:logback-access (0.9.22), ch.qos.logback:logback-classic (0.9.22) +1 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.22)

ch.qos.logback:logback-core MAVEN version 0.9.22 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.22 - ch.qos.logback:logback-classic 0.9.22 -...

ch.qos.logback:logback-access (0.9.23), ch.qos.logback:logback-classic (0.9.23) +1 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.23)

ch.qos.logback:logback-core MAVEN version 0.9.23 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.23 - ch.qos.logback:logback-classic 0.9.23 -...

ch.qos.logback:logback-access (0.9.25), ch.qos.logback:logback-classic (0.9.25) +8 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.25)

ch.qos.logback:logback-core MAVEN version 0.9.25 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.25 - ch.qos.logback:logback-classic 0.9.25 -...

ch.qos.logback:logback-access (0.9.26), ch.qos.logback:logback-classic (0.9.26) +126 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.26)

ch.qos.logback:logback-core MAVEN version 0.9.26 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.26 - ch.qos.logback:logback-classic 0.9.26 -...

ch.qos.logback:logback-access (0.9.27), ch.qos.logback:logback-classic (0.9.27) +34 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.27)

ch.qos.logback:logback-core MAVEN version 0.9.27 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.27 - ch.qos.logback:logback-classic 0.9.27 -...

ch.qos.logback:logback-access (0.9.28), ch.qos.logback:logback-classic (0.9.28) +113 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.28)

ch.qos.logback:logback-core MAVEN version 0.9.28 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 0.9.28 - ch.qos.logback:logback-classic 0.9.28 -...

ch.qos.logback:audit-client (0.5), ch.qos.logback:audit-common (0.5) +227 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (0.9.30)

ch.qos.logback:logback-core MAVEN version 0.9.30 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:audit-client 0.5 - ch.qos.logback:audit-common 0.5 - ch.qos.logback:audit-examples 0.5 -...

ai.tock:bot-test (22.3.2), ai.tock:bot-test-base (22.3.2) +1054 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (>=1.3.0, <=1.3.11)

ch.qos.logback:logback-core MAVEN version =1.3.0, =1.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ai.tock:bot-test 22.3.2 - ai.tock:bot-test-base 22.3.2 - ai.tock:bot-toolkit 22.3.2 -...

ai.tock:bot-test (22.3.2), ai.tock:bot-test-base (22.3.2) +1054 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (>=1.3.0, <=1.3.11)

ch.qos.logback:logback-core MAVEN version =1.3.0, =1.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ai.tock:bot-test 22.3.2 - ai.tock:bot-test-base 22.3.2 - ai.tock:bot-toolkit 22.3.2 -...

ai.optfor:spring-openai-api (>=0.1.3, <=0.3.25), ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3) +9375 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (>=1.4.0, <=1.4.11)

ch.qos.logback:logback-core MAVEN version =1.4.0, =0.1.3, =0.0.22, =0.0.10, =0.0.6, =0.0.28, =0.0.11, =0.9.38, =0.9.38, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =23.9.0, =23.9.1 and more Source cves: CVE-2023-6378 Source advisory: OSV:GHSA-VMQ6-5M68-F53M...

ai.optfor:spring-openai-api (>=0.1.3, <=0.3.25), ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3) +9375 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-core (>=1.4.0, <=1.4.11)

ch.qos.logback:logback-core MAVEN version =1.4.0, =0.1.3, =0.0.22, =0.0.10, =0.0.6, =0.0.28, =0.0.11, =0.9.38, =0.9.38, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =23.9.0, =23.9.1 and more Source cves: CVE-2023-6378 Source advisory: GHSA-VMQ6-5M68-F53M...

ch.qos.logback:log4j-bridge (0.9.6), ch.qos.logback:logback-examples (0.9.6) +2 more potentially affected by CVE-2023-6378 via ch.qos.logback:logback-classic (0.9.6)

ch.qos.logback:logback-classic MAVEN version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-classic and may be impacted: - ch.qos.logback:log4j-bridge 0.9.6 - ch.qos.logback:logback-examples 0.9.6 -...

logback serialization vulnerability

A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html...

DEBIAN-CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...