CVE-2026-10532
1 advisory.
Maven/ch.qos.logback:logback-core CVE-2026-10532: low
Logback vulnerable to Object Injection through HardenedObjectInputStream modules
Action: Upgrade ch.qos.logback:logback-core to 1.5.34 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.34 | - |
Fixed versions
| 1.5.34 |
Sources
- osv: GHSA-jhq6-gfmj-v8fx
- https://nvd.nist.gov/vuln/detail/CVE-2026-10532
- https://github.com/qos-ch/logback
- https://github.com/qos-ch/logback/releases/tag/v_1.5.34
- https://logback.qos.ch/news.html#1.5.34
CVE-2026-10532 · published · modified · JSON