Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Apache Lucy — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Apache Lucy, with AI-generated Chinese analysis, references, and POCs.

Vendor: Apache Software Foundation

CVE IDTitleCVSSSeverityPublished
CVE-2026-61486 Apache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed input CWE-121--2026-08-05
CVE-2026-61485 Apache Lucy: Freezer/InStream deserialization bomb - unbounded allocation reading an index CWE-789--2026-08-05
CVE-2026-61484 Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS CWE-502--2026-08-05
CVE-2026-61483 Apache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS CWE-674--2026-08-05

All 4 known CVE vulnerabilities affecting Apache Lucy with full Chinese analysis, references, and POCs where available.