Maven/ch.qos.logback:logback-core CVE-2026-10532: low 2.9, EPSS 0.37%
Logback vulnerable to Object Injection through HardenedObjectInputStream modules
Action: Upgrade ch.qos.logback:logback-core to 1.5.34 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.34 | - |
Fixed versions
| 1.5.34 |
Sources
- osv: GHSA-jhq6-gfmj-v8fx
- nvd: CVE-2026-10532
- https://github.com/qos-ch/logback
- https://github.com/qos-ch/logback/releases/tag/v_1.5.34
- https://logback.qos.ch/news.html#1.5.34
CVE-2026-10532 · published · modified · JSON