Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Lucy

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-61486

    Apache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed input

    ** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alt…

    Apache Software Foundation Apache Lucy
  • Critical 9.8
    CVE-2026-61484

    Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS

    ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find …

    Apache Software Foundation Apache Lucy