Apache Lucene.net (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-07-03. Vendor: Apache Software Foundation.

CVEs of Apache Lucene.net

• CVE-2026-47896 - CVSS 8.9 (high), 2026-07-03: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Lucene.Net (Lucene.Net.Replicator library). This issue…
• CVE-2026-47897 - CVSS 8.9 (high), 2026-07-03: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Lucene.Net (Lucene.Net.Replicator library). This issue…
• CVE-2026-47898 - CVSS 9.8 (critical), 2026-07-03: Improper Restriction of XML External Entity Reference vulnerability in Apache Lucene.Net (Lucene.Net.Analysis.Common library). This issue affects Apache…