`ch.qos.logback:logback-core`

Ecosystem:
maven

Package URL:
pkg:maven/ch.qos.logback:logback-core

Total PRs:
729 Dependabot PRs

Latest PR:
11 days ago

Unique Repositories:
407 repositories

Unique Repos (30 days):
12 repositories

Security Advisories

Deserialization of Untrusted Data in logback

GHSA-668q-qrv7-99fm CVE-2021-42550 MODERATE published over 4 years ago • updated 13 minutes ago

In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configur...

Logback vulnerable to Object Injection through HardenedObjectInputStream modules

GHSA-jhq6-gfmj-v8fx CVE-2026-10532 LOW published about 2 months ago • updated 2 days ago

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Objec...

QOS.CH logback-core Expression Language Injection vulnerability

GHSA-pr98-23f8-jwxv CVE-2024-12798 MODERATE published over 1 year ago • updated 14 minutes ago

ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core up to and including version 1.5.12 in Java applications allows attackers to execut...

QOS.CH Sarl logback logback-core has a deserialization of untrusted data vulnerability

GHSA-p47f-322f-whfh CVE-2026-9828 LOW published about 2 months ago • updated 2 days ago

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Objec...

QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processing

GHSA-25qh-j22f-pwp8 CVE-2025-11226 MODERATE published 10 months ago • updated 14 minutes ago

QOS.CH logback-core versions up to 1.5.18 contain an ACE vulnerability in conditional configuration file processing in Java applications. This vuln...

View all 10 advisories

Recent PRs

RSS Feed

SCANJLIB-320 Bump ch.qos.logback:logback-core from 1.5.21 to 1.5.34 in /its/it-tests

SonarSource/sonar-scanner-java-library #298

1.5.21 → 1.5.34 Patch PR

Open 11 days ago 2 comments

Bump ch.qos.logback:logback-core from 1.5.25 to 1.5.35

Marcelektro/SocksProxyServer #5

1.5.25 → 1.5.35 Patch PR

Closed 16 days ago 1 comment

Bump ch.qos.logback:logback-core from 1.2.11 to 1.5.35 in /java

Nortech-ai/tahu #13

1.2.11 → 1.5.35 Minor PR

Closed 16 days ago 1 comment

Bump ch.qos.logback:logback-core from 1.5.25 to 1.5.33

DataBiosphere/consent #2963

1.5.25 → 1.5.33 Patch PR

Open 21 days ago 1 comment

Bump ch.qos.logback:logback-core from 1.5.19 to 1.5.33 in /public/common/buildsupport/logging in the maven group across 1 directory

SherfeyInv/nexus-public #254

1.5.19 → 1.5.33 Patch PR

Open 21 days ago 2 comments

Bump ch.qos.logback:logback-core from 1.5.32 to 1.5.33 in /bundles/org.openhab.core.test

holgerfriedrich/openhab-core #126

1.5.32 → 1.5.33 Patch PR

Closed 21 days ago 1 comment

build(deps): bump ch.qos.logback:logback-core from 1.5.32 to 1.5.33

KyrieChao/Failure #47

1.5.32 → 1.5.33 Patch PR

Open 21 days ago 1 comment

Bump ch.qos.logback:logback-core from 1.0.9 to 1.5.33

data-integrations/hierarchy-plugins #25

1.0.9 → 1.5.33 Minor PR

Closed 21 days ago 1 comment

Bump ch.qos.logback:logback-core from 1.5.25 to 1.5.33 in /spring-boot-project/spring-boot-dependencies

Thoogend1/IDH10-MeerBier #175

1.5.25 → 1.5.33 Patch PR

Closed 21 days ago 1 comment

Bump ch.qos.logback:logback-core from 1.5.13 to 1.5.33 in /samples/client/petstore/jaxrs-cxf-client

Dustin4444/openapi-generator #481

1.5.13 → 1.5.33 Patch PR

Open 23 days ago 6 comments

Bump ch.qos.logback:logback-core from 1.5.20 to 1.5.35

navikt/veilarbportefolje #2263

1.5.20 → 1.5.35 Patch PR

Open 27 days ago 1 comment

chore(deps): bump ch.qos.logback:logback-core from 1.3.12 to 1.5.25 in the gradle group across 1 directory

kestra-io/plugin-huawei #28

1.3.12 → 1.5.25 Minor PR

Open about 1 month ago 2 comments

build(deps): bump the all-maven group across 1 directory with 115 updates

beyonai/ByClaw #134

1.5.18 → 1.5.34 Patch PR

Closed about 2 months ago 2 comments

Bump the dependencies group across 1 directory with 14 updates

eclipse-ee4j/eclipselink #2763

1.5.32 → 1.5.34 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the maven-minor-patch group across 1 directory with 9 updates

Pololac/PowerMe #104

1.5.32 → 1.5.33 Patch PR

Open about 2 months ago 1 comment

[12.1.x EE11] Bump the dev-dependencies group across 1 directory with 14 updates

jetty/jetty.project #15211

1.5.32 → 1.5.33 Patch PR

Closed about 2 months ago 1 comment

[12.1.x EE10] Bump the dev-dependencies group across 1 directory with 14 updates

jetty/jetty.project #15208

1.5.32 → 1.5.33 Patch PR

Closed about 2 months ago 1 comment

Bump the dependencies group across 1 directory with 12 updates

eclipse-ee4j/eclipselink #2755

1.5.32 → 1.5.33 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump ch.qos.logback:logback-core from 1.5.24 to 1.5.33

wwjiang007/shiro #900

1.5.24 → 1.5.33 Patch PR

Closed about 2 months ago 1 comment

[12.1.x EE8] Bump the dev-dependencies group across 1 directory with 11 updates

jetty/jetty.project #15176

1.5.32 → 1.5.33 Patch PR

Closed 2 months ago 1 comment

[12.1.x Root pom] Bump the dev-dependencies group across 1 directory with 15 updates

jetty/jetty.project #15173

1.5.32 → 1.5.33 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the maven-minor-patch group with 165 updates

open-metadata/OpenMetadata #28193

1.5.25 → 1.5.32 Patch PR

Open 2 months ago 1 comment

Bump the maven group across 1 directory with 6 updates

onap/aai-aai-common #42

1.4.14 → 1.5.25 Minor PR

Open 2 months ago 2 comments

Bump ch.qos.logback:logback-core from 1.5.20 to 1.5.25 in the maven group across 1 directory

sadramesbah/cars-inventory-api #62

1.5.20 → 1.5.25 Patch PR

Closed 3 months ago 3 comments

Bump ch.qos.logback:logback-core from 1.5.20 to 1.5.25 in the maven group across 1 directory

sadramesbah/load-balancer-simulator #69

1.5.20 → 1.5.25 Patch PR

Open 3 months ago 1 comment

Bump ch.qos.logback:logback-core from 1.3.14 to 1.5.25

mvallim/emv-qrcode #57

1.3.14 → 1.5.25 Minor PR

Closed 3 months ago 2 comments

chore(deps): bump the backend-dependencies group with 41 updates

paykaribazaronline/supremeai #53

1.5.8 → 1.5.32 Patch PR

Open 3 months ago 2 comments

Bump the dependencies group with 98 updates

theit/logging-log4j2 #296

1.2.11 → 1.5.32 Minor PR

Closed 3 months ago 1 comment

Bump ch.qos.logback:logback-core from 1.3.16 to 1.5.25 in /systemready

wilx/felix-dev #34

1.3.16 → 1.5.25 Minor PR

Closed 3 months ago 1 comment

build(deps): bump ch.qos.logback:logback-core from 1.5.13 to 1.5.25 in /workspace/java/minora

FairylandTech/developer #4

1.5.13 → 1.5.25 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the maven-minor-patch group in /backend with 10 updates

Pololac/PowerMe #82

1.5.25 → 1.5.32 Patch PR

Open 3 months ago 1 comment

Bump the maven group across 18 directories with 24 updates

abrahem79/glowroot #5

1.2.13 → 1.5.25 Minor PR

Open 3 months ago 2 comments

build(deps-dev): bump the maven group across 1 directory with 2 updates

astubbs/parallel-consumer #47

1.5.19 → 1.5.25 Patch PR

Open 3 months ago 2 comments

chore(deps-dev): bump ch.qos.logback:logback-core from 1.1.3 to 1.5.25

itcraft-cn/jmsg-i18n #1

1.1.3 → 1.5.25 Minor PR

Closed 3 months ago 1 comment

Bump the maven group across 4 directories with 8 updates

cezary13k/nexus-public #5

1.5.19 → 1.5.25 Patch PR

Closed 3 months ago 1 comment

[release-v1.17][maven]: Bump the patch group across 1 directory with 12 updates

openshift-knative/eventing-kafka-broker #2302

1.5.17 → 1.5.32 Patch PR

Open 3 months ago 2 comments

Bump the prod-deps group across 1 directory with 10 updates

graham-evans/AISandbox-Server #10

1.5.20 → 1.5.32 Patch PR

Open 3 months ago 1 comment

Bump the maven group across 12 directories with 10 updates

AKJUS/YCSB #59

1.1.3 → 1.5.25 Minor PR

Open 4 months ago 1 comment

chore: bump the non-breaking group across 1 directory with 16 updates

Minestom/Minestom #3101

1.5.19 → 1.5.32 Patch PR

Open 4 months ago 1 comment

Bump the maven group across 8 directories with 10 updates

Kakachia777/neo4j #2

1.5.9 → 1.5.25 Patch PR

Closed 4 months ago 1 comment

Bump the maven group across 12 directories with 10 updates

ljishen/YCSB #6

1.1.3 → 1.5.25 Minor PR

Closed 4 months ago 1 comment

Bump the maven group across 4 directories with 3 updates

proshin-roman/openapi-generator #81

1.5.13 → 1.5.25 Patch PR

Open 4 months ago 2 comments

Bump the external-minor-dev-dependencies group across 1 directory with 9 updates

romain-cotoni/dvpi-partner-backend #6

1.5.21 → 1.5.32 Patch PR

Closed 4 months ago 1 comment

Bump the maven group across 4 directories with 7 updates

SherfeyInv/nexus-public #248

1.5.19 → 1.5.25 Patch PR

Open 4 months ago 1 comment

[DT-400-maven]: Bump the maven-other-updates group with 26 updates

DataBiosphere/consent-ontology #1084

1.5.25 → 1.5.32 Patch PR

Open 4 months ago 1 comment

Bump ch.qos.logback:logback-core from 1.4.5 to 1.5.32

RealYusufIsmail/Quran-Skill #164

1.4.5 → 1.5.32 Minor PR

Open 4 months ago 2 comments

Bump ch.qos.logback:logback-core from 1.5.20 to 1.5.25 in the maven group across 1 directory

sadramesbah/asynchronous-communicating-agents #79

1.5.20 → 1.5.25 Patch PR

Closed 4 months ago 3 comments

Bump ch.qos.logback:logback-core from 1.2.7 to 1.5.25

Ankithav18/Vulnerability-Scanning- #5

1.2.7 → 1.5.25 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump the minor-and-patch group in /platform-storage with 6 updates

SoarCollab/RecordPlatform #98

1.5.25 → 1.5.32 Patch PR

Open 5 months ago 1 comment

Bump the maven group across 56 directories with 30 updates

Centaurioun/tutorials #1325

1.2.7 → 1.5.25 Minor PR

Closed 5 months ago 1 comment

Package Details

Name:	`ch.qos.logback:logback-core`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/ch.qos.logback:logback-core`
JSON API:	View JSON

Security Advisories

10

Active advisories

CRITICAL 1

HIGH 2

MODERATE 3

LOW 4

View All maven Advisories

Package Information

Description:

logback-core module

Repository:	https://github.com/qos-ch/logback
Homepage:	http://logback.qos.ch
Latest Release:	`1.5.18` over 1 year ago
Dependent Repos:	43,479
Dependent Packages:	5,539
Ranking:	Top 0.0214% by dependent repos Top 0.0122% by dependent pkgs

PR Status

Open 314 (43.1%)

Merged 39 (5.3%)

Closed 348 (47.7%)

PR Types

Minor 246 (33.7%)

Patch 453 (62.1%)