Uncontrolled Recursion in Apache Lucy Affected by Vulnerability

CVE-2026-61483

What is CVE-2026-61483?

An uncontrolled recursion vulnerability has been identified in Apache Lucy, affecting all versions of this now-retired library. As the project is no longer supported by its maintainers, no patch or fix will be provided. Users of Apache Lucy are highly advised to seek alternative solutions or ensure that access to instances running this software is strictly limited to trusted personnel to mitigate potential security risks associated with this vulnerability.

References