Findings

OSV-2026-481

Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII

Published Mar 28, 2026 · updated Oct 15, 2026

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=496552925

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 28, 2026 · OSV.dev

    Detected

    OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=496552925

  2. Oct 15, 2026 · OSV.dev

    Updated

    OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=496552925

Affected

  • OSS-Fuzz lucenereleases/lucene/10.0.0, releases/lucene/10.1.0, releases/lucene/10.2.0

Sources

  • OSV.devPackage advisoryOSV-2026-481

    Security exception in org.apache.lucene.analysis.miscellaneous.ASCIIFoldingFilter.foldToASCII

    osv.dev

References