CVE-2026-61483

CVE-2026-61483 affects Apache Lucy (all versions). The entry describes an Uncontrolled Recursion vulnerability in the QueryParser that can lead to a C-stack overflow DoS when processing deeply-nested queries. The issue is tied to Apache Lucy being retired; there will be no fixed release, and guid...

EUVD-2026-53168

UNSUPPORTED WHEN ASSIGNED Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to...

CVE-2026-61483

UNSUPPORTED WHEN ASSIGNED Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to...

CVE-2026-61483 Apache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS

UNSUPPORTED WHEN ASSIGNED Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to...

PT-2026-68029

Name of the Vulnerable Software and Affected Versions Apache Lucy affected versions not specified Description An uncontrolled recursion issue exists in Apache Lucy. Uncontrolled recursion occurs when a function calls itself without a proper termination condition, potentially leading to a stack...

PT-2026-68031

Name of the Vulnerable Software and Affected Versions Apache Lucy affected versions not specified Description Apache Lucy contains a memory allocation issue where an excessive size value can be used, potentially leading to system instability or crashes. Recommendations Restrict access to the...

PT-2026-68032

Name of the Vulnerable Software and Affected Versions Apache Lucy affected versions not specified Description A stack-based buffer overflow occurs in Apache Lucy. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is...

PT-2026-68030

Name of the Vulnerable Software and Affected Versions Apache Lucy affected versions not specified Description Apache Lucy is subject to a deserialization of untrusted data issue. Deserialization is the process of converting a data stream back into an object, which can lead to security risks if th...

CVE-2026-61486: Stack-based Buffer Overflow

UNSUPPORTED WHEN ASSIGNED Stack-based Buffer Overflow vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance ...

CVE-2026-61484: Deserialization of Untrusted Data

UNSUPPORTED WHEN ASSIGNED Deserialization of Untrusted Data vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the...

CVE-2026-61483: Uncontrolled Recursion

UNSUPPORTED WHEN ASSIGNED Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to...