Apache Lucy vulnerabilities

3 CVEs affecting Apache Lucy, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-61486, published 2026-08-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-61483, published 2026-08-05. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a…
CVE-2026-61486, published 2026-08-05. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a…
CVE-2026-61484, published 2026-08-05. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to…