Launchpad.net

CVE 2017-5929

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

See the CVE page on Mitre.org for more details.