CVE-2025-53114
1 advisory.
Maven/org.cometd.java:cometd-java-server-common CVE-2025-53114: high 7.5
Acknowledgement extension out of memory
Action: Upgrade org.cometd.java:cometd-java-server-common to 5.0.23 (5.x), 6.0.19 (6.x), 7.0.19 (7.x) or 8.0.9 (8.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.23 | - |
| 6.0.0 | 6.0.19 | - |
| 7.0.0 | 7.0.19 | - |
| 8.0.0 | 8.0.9 | - |
Fixed versions
| 5.0.23 | 6.0.19 | 7.0.19 | 8.0.9 |
Sources
- osv: GHSA-cqgj-h8vf-4w59
- https://github.com/cometd/cometd/security/advisories/GHSA-cqgj-h8vf-4w59
- https://github.com/cometd/cometd/issues/2117
- https://github.com/cometd/cometd/pull/2118
- https://github.com/cometd/cometd/pull/2168
- https://github.com/cometd/cometd/pull/2169
- https://github.com/cometd/cometd
- https://github.com/cometd/cometd/discussions/2116
CVE-2025-53114 · published · modified · JSON