{"action":"Upgrade org.cometd.java:cometd-java-server-common to 5.0.23 (5.x), 6.0.19 (6.x), 7.0.19 (7.x) or 8.0.9 (8.x) or later.","affected":[{"fixed":"5.0.23","introduced":"5.0.0"},{"fixed":"6.0.19","introduced":"6.0.0"},{"fixed":"7.0.19","introduced":"7.0.0"},{"fixed":"8.0.9","introduced":"8.0.0"}],"component":"org.cometd.java:cometd-java-server-common","cve_ids":["CVE-2025-53114"],"ecosystem":"Maven","epss":0.00684,"exploited":false,"fixed_versions":["5.0.23","6.0.19","7.0.19","8.0.9"],"ghsa_id":"GHSA-cqgj-h8vf-4w59","id":"tcs_01M5N8T0KCZKFKAPX1QMXHE13H","modified_at":"2026-06-10T17:11:27.329206Z","published_at":"2026-06-10T16:46:28Z","references":["https://osv.dev/vulnerability/GHSA-cqgj-h8vf-4w59","https://github.com/cometd/cometd/security/advisories/GHSA-cqgj-h8vf-4w59","https://github.com/cometd/cometd/issues/2117","https://github.com/cometd/cometd/pull/2118","https://github.com/cometd/cometd/pull/2168","https://github.com/cometd/cometd/pull/2169","https://github.com/cometd/cometd","https://github.com/cometd/cometd/discussions/2116"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cqgj-h8vf-4w59","url":"https://osv.dev/vulnerability/GHSA-cqgj-h8vf-4w59"}],"summary":"Acknowledgement extension out of memory"}