{"action":"Upgrade ch.qos.logback:logback-classic to 1.2.13 (1.2.x), 1.3.12 (1.3.x) or 1.4.12 (1.4.x) or later.","affected":[{"fixed":"1.3.12","introduced":"1.3.0"},{"fixed":"1.4.12","introduced":"1.4.0"},{"fixed":"1.2.13","introduced":"0"}],"component":"ch.qos.logback:logback-classic","cve_ids":["CVE-2023-6378"],"ecosystem":"Maven","epss":0.009,"exploited":false,"fixed_versions":["1.3.12","1.4.12","1.2.13"],"ghsa_id":"GHSA-vmq6-5m68-f53m","id":"tcs_01M5N9EC8Y8N4MND5TF03QJGR1","modified_at":"2026-09-10T03:50:04.518871254Z","published_at":"2023-11-29T12:30:16Z","references":["https://osv.dev/vulnerability/GHSA-vmq6-5m68-f53m","https://nvd.nist.gov/vuln/detail/CVE-2023-6378","https://github.com/qos-ch/logback/issues/745#issuecomment-1836227158","https://github.com/qos-ch/logback/commit/9c782b45be4abdafb7e17481e24e7354c2acd1eb","https://github.com/qos-ch/logback/commit/b8eac23a9de9e05fb6d51160b3f46acd91af9731","https://github.com/qos-ch/logback/commit/bb095154be011267b64e37a1d401546e7cc2b7c3","https://github.com/qos-ch/logback","https://logback.qos.ch/manual/receivers.html","https://logback.qos.ch/news.html#1.2.13","https://logback.qos.ch/news.html#1.3.12","https://security.netapp.com/advisory/ntap-20241129-0012"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-vmq6-5m68-f53m","url":"https://osv.dev/vulnerability/GHSA-vmq6-5m68-f53m"}],"summary":"logback serialization vulnerability"}