Lucy
by Apache
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-61486 | Cri | 0.64 | 9.8 | 0.01 | Aug 5, 2026 | ** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or… | ||
| CVE-2026-61484 | Cri | 0.64 | 9.8 | 0.01 | Aug 5, 2026 | ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative… | ||
| CVE-2026-61483 | Hig | 0.49 | 7.5 | 0.01 | Aug 5, 2026 | ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or… | ||
| CVE-2026-61485 | 0.00 | — | 0.01 | Aug 5, 2026 | Rejected reason: this attack requires control over the search index, which is considered fully trusted by Lucy. |
- risk 0.64cvss 9.8epss 0.01
** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or…
- risk 0.64cvss 9.8epss 0.01
** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative…
- risk 0.49cvss 7.5epss 0.01
** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or…
- CVE-2026-61485Aug 5, 2026risk 0.00cvss —epss 0.01
Rejected reason: this attack requires control over the search index, which is considered fully trusted by Lucy.