Vulnerabilities

TI-2026-44076 CVE-2026-61486 · GHSA-phfr-gw5r-65ff

Apache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed input

MEDIUM 44

** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00807 Published 2026-08-05 Fixed in 0.8.0 CWE-121

TI-2026-44075 CVE-2026-61484 · GHSA-q347-vr2h-mpmx

MEDIUM 50

** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00806 Published 2026-08-05 Fixed in 0.8.0 CWE-502

TI-2026-44074 CVE-2026-61483 · GHSA-3rc9-h6hx-fvf7

MEDIUM 41

** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0103 Published 2026-08-05 Fixed in 0.8.0 CWE-674