https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-6481.htmlhttps://patchthecve.com/cve/CVE-2023-6481.htmlWed, 17 Jun 2026 06:50:49 +0000HIGH 7.1: A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. https://patchthecve.com/cve/CVE-2023-6378.htmlhttps://patchthecve.com/cve/CVE-2023-6378.htmlWed, 17 Jun 2026 06:50:38 +0000HIGH 7.1: A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. https://patchthecve.com/cve/CVE-2021-42550.htmlhttps://patchthecve.com/cve/CVE-2021-42550.htmlWed, 17 Jun 2026 04:09:48 +0000MEDIUM 6.6: In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers.https://patchthecve.com/cve/CVE-2017-5929.htmlhttps://patchthecve.com/cve/CVE-2017-5929.htmlWed, 17 Jun 2026 01:21:27 +0000CRITICAL 9.8: QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.