Red Hat Lightwell has released ch.qos.logback:logback-classic 1.2.11.rhlw-00001 with a backported security fix.
CVE-2023-6378: Logback "receiver" DOS vulnerability
This patched artifact is a drop-in replacement for ch.qos.logback:logback-classic 1.2.11 from Maven Central.