{"action":"Upgrade ch.qos.logback:logback-core to 1.5.33 or later.","affected":[{"fixed":"1.5.33","introduced":"0"}],"component":"ch.qos.logback:logback-core","cve_ids":["CVE-2026-9828"],"ecosystem":"Maven","epss":0.00545,"exploited":false,"fixed_versions":["1.5.33"],"ghsa_id":"GHSA-p47f-322f-whfh","id":"tcs_01M5N96CXF2HCVCBEDK9F1FGKE","modified_at":"2026-09-10T03:50:47.152421417Z","published_at":"2026-05-28T15:39:50Z","references":["https://osv.dev/vulnerability/GHSA-p47f-322f-whfh","https://nvd.nist.gov/vuln/detail/CVE-2026-9828","https://github.com/qos-ch/logback","https://logback.qos.ch/news.html#1.5.33"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-p47f-322f-whfh","url":"https://osv.dev/vulnerability/GHSA-p47f-322f-whfh"}],"summary":"QOS.CH Sarl logback logback-core has a deserialization of untrusted data vulnerability"}