CVE-2026-61483

Apache Lucy is affected by CVE-2026-61483 due to an unbounded recursion in QueryParser that can cause a C-stack overflow and DoS. The issue affects all versions because the project is retired and there is no planned fix; users are advised to find an alternative or restrict access to trusted users...