CVE-2026-1225

Low

Advisory

Published 22 Jan 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 1.8; base score, highest
EPSS: 0.002; 5th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 451; of 17,781 indexed, latest versions
Container images: 424; deployed by those charts
Fix available: 1 of 1; affected package

Logback allows an attacker to instantiate classes already present on the class path

Carried by container images the latest versions of 451 of 17,781 indexed charts deploy, on 424 images.

Affected package	Affected versions	Fixed in	Images
logback-coremaven	1.0.11, 1.0.13, 1.1.2, 1.1.3+38 more	1.5.25	424

OSV records: GHSA-qqpg-mvqg-649v

Charts affected

451 by stars

Chart

Latest

Affected images

Radar Score

language-toolzekker6

1.12.1

1 of 2 See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-1225.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	logback-core@1.5.18	1.5.25

Open the chart page →

1,571

Container images carrying it

424 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
dellcloud/pages :monitor	6ba7b22caacd	logback-core@1.2.3	1.5.25	79
codeurjc/toposervice :v1.0 :v1.23	9fb4c11e6a49	logback-core@1.4.5	1.5.25	13
library/cassandra :3.11.3	ce85468c5bad	logback-core@1.1.3	1.5.25	7
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	logback-core@1.2.9	1.5.25	4
mastercloudapps/planner :v1.23	40a950b311b2	logback-core@1.2.7	1.5.25	4
oscarsotosanchez/toposervice :v1.0	d4d020e9f272	logback-core@1.2.3	1.5.25	4
apache/shenyu-admin :2.4.2	e8b7c4ddd069	logback-core@1.2.3	1.5.25	3
apache/shenyu-bootstrap :2.4.2	0bd3b25c4be4	logback-core@1.2.3	1.5.25	3
codeurjc/planner :v1.0	800cf520c245	logback-core@1.2.7	1.5.25	3
guacamole/guacamole :1.6.0	f344085e618b	logback-core@1.3.15	1.5.25	3
jacobalberty/unifi :v10.0.162	896c0ab82d33	logback-core@1.5.18	1.5.25	3
lmenezes/cerebro :0.9.4	7d9e2b77e459	logback-core@1.2.3	1.5.25	3
pavanelthepu/todo-api :1.0.2	f47658e3b24c	logback-core@1.2.3	1.5.25	3
provectuslabs/kafka-ui :latest	8f2ff02d64b0	logback-core@1.4.11	1.5.25	3
supertokens/supertokens-postgresql :3.14	18d34c781347	logback-core@1.2.3	1.5.25	3
apache/fineract :1.12.1	a83cf1980609	logback-core@1.5.17	1.5.25	2
apache/nifi-registry :1.26.0	7cdfd8deec92	logback-core@1.3.14	1.5.25	2
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	logback-core@1.2.3	1.5.25	2
apache/rocketmq :5.4.0	319cd8a81ed1	logback-core@1.3.5	1.5.25	2
apacherocketmq/rocketmq-dashboard :2.1.0	ce78506bd6fe	logback-core@1.3.5	1.5.25	2
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	logback-core@1.2.10	1.5.25	2
datagrok/grok_connect :latest	f5876d3aebb8	logback-core@1.3.16	1.5.25	2
dependencytrack/apiserver :4.6.3	485ac0952c02	logback-core@1.2.11	1.5.25	2
dina1993/airports-api :latest	ac731244aed1	logback-core@1.4.6	1.5.25	2
dina1993/airports-consumer :latest	669d146a5e63	logback-core@1.4.6	1.5.25	2
dina1993/airports-producer :latest	3d6b0dac1cb4	logback-core@1.4.6	1.5.25	2
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	logback-core@1.2.3	1.5.25	2
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	logback-core@1.2.3	1.5.25	2
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	logback-core@1.2.3	1.5.25	2
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	logback-core@1.2.3	1.5.25	2
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	logback-core@1.2.3	1.5.25	2
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	logback-core@1.2.3	1.5.25	2
gradiant/opentsdb :2.4.0	c33d53913869	logback-core@1.0.13	1.5.25	2
hookiesolutions/webhookie :latest	0629694246ba	logback-core@1.2.10	1.5.25	2
library/cassandra :3.11.6	5aa8400b4b3b	logback-core@1.1.3	1.5.25	2
library/cassandra :4.1.3	7cbcec0086ac	logback-core@1.2.9	1.5.25	2
library/zookeeper :3.9.5	f258365d4882	logback-core@1.3.15	1.5.25	2
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	logback-core@1.1.3	1.5.25	2
nacos/nacos-server :v2.1.0	dcf04549c6d7	logback-core@1.2.9	1.5.25	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	logback-core@1.2.11	1.5.25	2
scorpiobroker/scorpio :RegistrySubscriptionManager_2.1.0	01e11d800459	logback-core@1.2.7	1.5.25	2
scorpiobroker/scorpio :eureka-server_2.1.0	3f05a113a4be	logback-core@1.2.7	1.5.25	2
scorpiobroker/scorpio :AtContextServer_2.1.0	5073ceef2fa0	logback-core@1.2.7	1.5.25	2
scorpiobroker/scorpio :gateway_2.1.0	62dae3dd0eeb	logback-core@1.2.7	1.5.25	2
scorpiobroker/scorpio :RegistryManager_2.1.0	a2cfcf0947fd	logback-core@1.2.7	1.5.25	2
scorpiobroker/scorpio :QueryManager_2.1.0	b742a53b2803	logback-core@1.2.7	1.5.25	2
scorpiobroker/scorpio :HistoryManager_2.1.0	b7fe27a06ff5	logback-core@1.2.7	1.5.25	2
scorpiobroker/scorpio :config-server_1.1.0	c46c1517e523	logback-core@1.2.3	1.5.25	2
scorpiobroker/scorpio :SubscriptionManager_2.1.0	e08036670d66	logback-core@1.2.7	1.5.25	2
scorpiobroker/scorpio :EntityManager_2.1.0	f02e8a429a08	logback-core@1.2.7	1.5.25	2