Apache Lucy vulnerabilities

Stack-based buffer overflow vulnerability in Apache Lucy affects all versions. The project is retired and no fix will be released. Users are advised to find an alternative or restrict access to trusted users.

Deserialization of untrusted data vulnerability in Apache Lucy. The project is retired and no fix is planned. Users are advised to find an alternative or restrict access to trusted users.

A Memory Allocation with Excessive Size Value vulnerability in Apache Lucy affects all versions. As the project is retired, no fix will be released.

Apache Lucy (retired project) has an uncontrolled recursion vulnerability in all versions. The project is no longer supported, so no fix will be released. Users are advised to find an alternative or restrict access to trusted users.