ch.qos.logback:logback-classic

Licenses: GPL-3.0 | LGPL-2.1 | (EPL-2.0 OR LGPL-2.1) | (EPL-1.0 OR LGPL-2.1)

License

GPL-3.0[0.2.5,0.5);
LGPL-2.1[0.5,0.9.18);
(EPL-2.0 OR LGPL-2.1)[1.5.27,);
(EPL-1.0 OR LGPL-2.1)[0.9.18,1.5.27);

Direct Vulnerabilities

Known vulnerabilities in the ch.qos.logback:logback-classic package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Improper Neutralization of Special Elements

[,1.3.15)[1.4.0,1.5.13)
  • H
Uncontrolled Resource Consumption ('Resource Exhaustion')

[,1.2.13)[1.3.0,1.3.14)[1.4.0,1.4.14)
  • H
Denial of Service (DoS)

[,1.2.13)[1.3.0-alpha0,1.3.12)[1.4.0,1.4.12)
  • C
Arbitrary Code Execution

[0.3,1.2.0)

Package versions

165 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
1.5.341 Jun, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.5.3327 May, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.5.3216 Feb, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.5.3114 Feb, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.5.3014 Feb, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.5.299 Feb, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.5.286 Feb, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.5.2730 Jan, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.5.2625 Jan, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
1.5.2517 Jan, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L