{"action":"Upgrade ch.qos.logback:logback-core to 1.2.13 (1.2.x), 1.3.14 (1.3.x) or 1.4.14 (1.4.x) or later.","affected":[{"fixed":"1.4.14","introduced":"1.4.13"},{"fixed":"1.3.14","introduced":"1.3.13"},{"fixed":"1.2.13","introduced":"1.2.12"}],"component":"ch.qos.logback:logback-core","cve_ids":["CVE-2023-6481"],"ecosystem":"Maven","epss":0.00682,"exploited":false,"fixed_versions":["1.4.14","1.3.14","1.2.13"],"ghsa_id":"GHSA-gm62-rw4g-vrc4","id":"tcs_01M5N8YGQPA2PNQ6VDBJ3DV3DF","modified_at":"2026-09-10T03:50:04.490429448Z","published_at":"2023-12-04T09:30:23Z","references":["https://osv.dev/vulnerability/GHSA-gm62-rw4g-vrc4","https://nvd.nist.gov/vuln/detail/CVE-2023-6481","https://github.com/qos-ch/logback/commit/7018a3609c7bcc9dc7bf5903509901a986e5f578","https://github.com/qos-ch/logback/commit/c612b2fa3caf6eef3c75f1cd5859438451d0fd6f","https://github.com/qos-ch/logback","https://logback.qos.ch/news.html#1.3.12","https://logback.qos.ch/news.html#1.3.14"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-gm62-rw4g-vrc4","url":"https://osv.dev/vulnerability/GHSA-gm62-rw4g-vrc4"}],"summary":"Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data"}