/ 
Lucy-0.8.0_1
/ FlatQueryParser
Security Advisories (1)
CVE-2026-61485 (2026-08-05)

Apache Lucy: Freezer/InStream deserialization bomb - unbounded allocation reading an index ** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

NAME

FlatQueryParser - Simple query parser, with no boolean operators.

SYNOPSIS

my $searcher = Lucy::Search::IndexSearcher->new( 
    index => '/path/to/index' 
);
my $parser = FlatQueryParser->new( $searcher->get_schema );
my $query  = $parser->parse($query_string);
my $hits   = $searcher->hits( query => $query );
...

DESCRIPTION

See Lucy::Docs::Cookbook::CustomQueryParser.