CVE-2025-53114
CometD is a scalable comet implementation for web messaging. In versions 5.0.0 through 5.0.22, 6.0.0 through 6.0.18, 7.0.0 through 7.0.18, and 8.0.0 through 8.0.8, bad clients that always send a fixed batch value when the server is using the acknowledgement extension may cause the unacknowledged message queue to grow indefinitely, eventually causing an `OutOfMemoryError`. Versions 5.0.23, 6.0.19, 7.0.19, and 8.0.9 patch the issue. As a workaround, disable the acknowledgement extension.
- CVSS 3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-25)
- CWE
- CWE-400
- Published
- Modified
- Record from
- the NVD, synced
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cqgj-h8vf-4w59 | Maven | org.cometd.java:cometd-java-server-common | >=5.0.0 <5.0.23 | 5.0.23 |
| GHSA-cqgj-h8vf-4w59 | Maven | org.cometd.java:cometd-java-server-common | >=6.0.0 <6.0.19 | 6.0.19 |
| GHSA-cqgj-h8vf-4w59 | Maven | org.cometd.java:cometd-java-server-common | >=7.0.0 <7.0.19 | 7.0.19 |
| GHSA-cqgj-h8vf-4w59 | Maven | org.cometd.java:cometd-java-server-common | >=8.0.0 <8.0.9 | 8.0.9 |