CVE-2026-61486

Apache Lucy is affected by a stack-based buffer overflow in the JSON parser error reporter when handling malformed input. All versions are affected, and since the project is retired, no fix is planned; users should consider restricting access or migrating to an alternative. The issue is documente...