logback-core module
98%
Total Score
100
89
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2026-10532 ch.qos.logback:logback-core is vulnerable to Deserialization of Untrusted Data in versions 0.0.0 - 1.5.34. | 0.0.0 - 1.5.34 | Low |
CVE-2026-9828 ch.qos.logback:logback-core is vulnerable to Deserialization of Untrusted Data in versions 0.0.0 - 1.5.32. | 0.0.0 - 1.5.32 | Low |
CVE-2026-1225 ch.qos.logback:logback-core is vulnerable to Improper Input Validation in versions 0.0.0 - 1.5.25. | 0.0.0 - 1.5.25 | Low |
AIKIDO-2025-10694 logback-core is vulnerable to Improper Input Validation in versions 1.4.0 - 1.5.18 and 0.9.20 - 1.3.15. | 0.9.20 - 1.3.151.4.0 - 1.5.18 | Medium |
CVE-2024-12801 ch.qos.logback:logback-core is vulnerable to Server-Side Request Forgery (SSRF) in versions 1.4.0 - 1.5.13 and 0.0.0 - 1.3.15. | 0.0.0 - 1.3.151.4.0 - 1.5.13 | Low |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
org.fusesource.jansi:jansi Version * | — | — |
org.jline:jansi-core Version * | — | — |
jakarta.mail:jakarta.mail-api Version * | — | — |
jakarta.servlet:jakarta.servlet-api Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant