OSV-2025-253 Security exception in org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=407477665 Crash type: Security exception Crash state: org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize org.apache.lucene.analysis.ckb.SoraniNormalizationFilter.incrementToken...

PT-2025-27562

Name of the Vulnerable Software and Affected Versions Apache Lucene affected versions not specified Description The software experiences a security exception during normalization processes. Specifically, the issue occurs within the SoraniNormalizer.normalize function, which is called during the...

org.jenkins-ci.lib:xtrigger-lib (>=0.34, <=0.35), org.jenkins-ci.main:jenkins-test-harness (1.590) +4 more potentially affected by CVE-2025-31721 via org.jenkins-ci.main:jenkins-core (1.590)

org.jenkins-ci.main:jenkins-core MAVEN version 1.590 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.lib:xtrigger-lib =0.34, =3.0, =4.4 -...

org.jenkins-ci.lib:xtrigger-lib (>=0.34, <=0.35), org.jenkins-ci.main:jenkins-test-harness (1.590) +4 more potentially affected by CVE-2025-31720 via org.jenkins-ci.main:jenkins-core (1.590)

org.jenkins-ci.main:jenkins-core MAVEN version 1.590 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.lib:xtrigger-lib =0.34, =3.0, =4.4 -...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.analysis.ckb.SoraniNormalizer.normalize

Detailed Report: https://oss-fuzz.com/testcase?key=6638724308074496 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2025-207 Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=403330010 Crash type: Security exception Crash state: org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone org.apache.lucene.analysis.tokenattributes.PackedTokenAttributeImpl.clone...

PT-2025-25435

Name of the Vulnerable Software and Affected Versions Apache Lucene affected versions not specified Description The software experiences a security exception during the cloning of certain attribute implementations. Specifically, the crash state involves...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.clone

Detailed Report: https://oss-fuzz.com/testcase?key=4848590547910656 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

LogicalDOC security vulnerabilities

LogicalDOC is a document management system developed using Java technology by LogicalDOC, Inc. in the United States. The system has features such as Lucene full-text search indexing and automatic importing. A security vulnerability exists in LogicalDOC that stems from an API used in the applicati...

LogicalDOC code injection vulnerability

LogicalDOC is the United States LogicalDOC company a set of document management system developed using Java technology . The system has Lucene full-text search index and automatic import and other functions. A security vulnerability exists in LogicalDOC, which stems from an automated scripting...

org.jenkins-ci.lib:xtrigger-lib (>=0.34, <=0.35), org.jenkins-ci.main:jenkins-test-harness (1.590) +4 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.590)

org.jenkins-ci.main:jenkins-core MAVEN version 1.590 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.lib:xtrigger-lib =0.34, =3.0, =4.4 -...

org.jenkins-ci.lib:xtrigger-lib (>=0.34, <=0.35), org.jenkins-ci.main:jenkins-test-harness (1.590) +4 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.590)

org.jenkins-ci.main:jenkins-core MAVEN version 1.590 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.lib:xtrigger-lib =0.34, =3.0, =4.4 -...

org.jenkins-ci.lib:xtrigger-lib (>=0.34, <=0.35), org.jenkins-ci.main:jenkins-test-harness (1.590) +4 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (1.590)

org.jenkins-ci.main:jenkins-core MAVEN version 1.590 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.lib:xtrigger-lib =0.34, =3.0, =4.4 -...

Security Bulletin: Vulnerability in Apache Lucene affects watsonx.data

Summary Apache Lucene is vulnerable to a denial of service attack and could affect watsonx.data. Vulnerability Details IBM X-Force ID: 216835 DESCRIPTION: Apache Lucene is vulnerable to a denial of service. By sending a specific regular expression query, a remote attacker could exploit this...

Ubuntu: Security Advisory (USN-7283-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-26511

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

SUSE CVE-2024-45772

Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator. This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users ar...

Instaclustr Cassandra-Lucene-Index allows bypass of Cassandra RBAC

Summary / Details Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.0-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited coul...

CVE-2025-26511

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...

CVE-2025-26511

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...