Red Hat Lightwell has released ch.qos.logback:logback-classic 1.6.1.rhlw-00001 with a backported security fix.
This patched artifact is a drop-in replacement for ch.qos.logback:logback-classic 1.6.1 from Maven Central.
{ "backport_base_version": "1.6.1", "remediated_version": "1.6.1.rhlw-00001", "repository_url": "https://packages.redhat.com/lightwell/java/remediated/" }
"https://github.com/project-lightwell/lightwell-osv/blob/main/advisories/RHLW-2026-21709a248f2eeb7d.json"