{"id":"RHLW-2026-271a386ee9cf984f","summary":"Lightwell Security Advisory: logback-classic 1.2.11.rhlw-00001","details":"Red Hat Lightwell has released ch.qos.logback:logback-classic 1.2.11.rhlw-00001 with a backported security fix.\n\nCVE-2023-6378: Logback \"receiver\" DOS vulnerability \n\nThis patched artifact is a drop-in replacement for ch.qos.logback:logback-classic 1.2.11 from Maven Central.","modified":"2026-10-20T23:00:06.013622209Z","published":"2026-10-08T19:45:01Z","upstream":["CVE-2023-6378","GHSA-vmq6-5m68-f53m"],"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6378.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6378"},{"type":"PACKAGE","url":"https://github.com/qos-ch/logback"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-vmq6-5m68-f53m"}],"schema_version":"1.9.1","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"}],"credits":[{"name":"Red Hat Lightwell","type":"REMEDIATION_DEVELOPER"}]}