Product by Apache Software Foundation

    Apache Lucy

    4 known vulnerabilities in Apache Lucy (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apache Lucy (Apache Software Foundation)
    CriticalCVE-2026-61486

    Apache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed input

    also in 1 other product

    		9.8
    CriticalCVE-2026-61484

    Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS

    also in 1 other product

    		9.8
    HighCVE-2026-61483

    Apache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS

    also in 1 other product

    		7.5
    HighCVE-2026-61485

    Apache Lucy: Freezer/InStream deserialization bomb - unbounded allocation reading an index

    also in 1 other product

    		7.5

    News

    All products by Apache Software Foundation