Security Advisories (4)
CVE-2026-61485 (2026-08-05)

Apache Lucy: Freezer/InStream deserialization bomb - unbounded allocation reading an index ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2026-61484 (2026-08-05)

Apache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS ** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2026-61483 (2026-08-05)

Apache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2026-61486 (2026-08-05)

Apache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed input ** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

NAME

Clownfish::Hierarchy - A class hierarchy.

DESCRIPTION

A Clownfish::Hierarchy consists of all the classes defined in files within a source directory and its subdirectories.

There may be more than one tree within the Hierarchy, since all "inert" classes are root nodes, and since Clownfish does not officially define any core classes itself from which all instantiable classes must descend.

METHODS

new

my $hierarchy = Clownfish::Hierarchy->new(
    source => undef,    # required
    dest   => undef,    # required
);
  • source - The directory we begin reading files from.

  • dest - The directory where the autogenerated files will be written.

build

$hierarchy->build;

Parse every Clownfish header file which can be found under source, building up the object hierarchy.

ordered_classes

my $classes = $hierarchy->ordered_classes;

Return all Classes as an array with the property that every parent class will precede all of its children.

propagate_modified

$hierarchy->propagate_modified($modified);

Visit all File objects in the hierarchy. If a parent node is modified, mark all of its children as modified.

If the supplied argument is true, mark all Files as modified.

get_source get_dest

Accessors.