Skip to content
OpenAdvisories

Vendor

cometd

2 known vulnerabilities.

Products

cometd 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-53114

    CometD has acknowledgement extension out of memory

    CometD is a scalable comet implementation for web messaging. In versions 5.0.0 through 5.0.22, 6.0.0 through 6.0.18, 7.0.0 through 7.0.18, and 8.0.0 through 8.0.8, bad clients that always send a fixed batch value when the server is using the acknowledgement e…

    cometd cometd org.cometd.java:cometd-java-server-common Maven
  • High 8.1
    CVE-2022-24721

    Incorrect Authorization in org.cometd.oort

    CometD is a scalable comet implementation for web messaging. In any version prior to 5.0.11, 6.0.6, and 7.0.6, internal usage of Oort and Seti channels is improperly authorized, so any remote user could subscribe and publish to those channels. By subscribing …

    cometd cometd org.cometd.java:cometd-java-oort Maven