Apache Software Foundation Apache Lucy

• CVE-2026-61486 Critical 9.8 Apache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed input 0.8%
• CVE-2026-61484 Critical 9.8 Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS 0.8%
• CVE-2026-61483 High 7.5 Apache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS 1.0%