What’s Vulnerable › Products

Apache Software Foundation Apache Lucy vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Apache Software Foundation Apache Lucy version is affected

Latest Apache Software Foundation Apache Lucy vulnerabilities

• CVE-2026-61486 — Apache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed input (CVSS 9.8)
• CVE-2026-61484 — Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS (CVSS 9.8)
• CVE-2026-61483 — Apache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS (CVSS 7.5)