ch.qos.logback:logback-classic@1.3.0-beta0 vulnerabilities
-
latest version
1.5.4
-
latest non vulnerable version
-
first published
18 years ago
-
latest version published
25 days ago
-
licenses detected
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the ch.qos.logback:logback-classic package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
ch.qos.logback:logback-classic is a reliable, generic, fast and flexible logging library for Java. Affected versions of this package are vulnerable to Denial of Service (DoS). An attacker can mount a denial-of-service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. How to fix Denial of Service (DoS)? Upgrade |
[,1.2.13)
[1.3.0-alpha0,1.3.12)
[1.4.0,1.4.12)
|