Lucy vulnerabilities

3 known vulnerabilities in Lucy from Apache. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache Lucy: Stack-based Buffer Overflow

  CVE-2026-61486Aug 5, 2026Apache

  ** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alte

• 9.8 Critical severity

  Apache Lucy: Deserialization of Untrusted Data

  CVE-2026-61484Aug 5, 2026Apache

  ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find a

• 7.5 High severity

  Apache Lucy: Uncontrolled Recursion

  CVE-2026-61483Aug 5, 2026ApacheEPSS 1.03%

  ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternati