From 4b8e38811906fad4bc8f682a27b776853930e50f Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Mon, 29 Jun 2026 09:23:51 -0400 Subject: [PATCH 1/2] Add CometD ack extension fix references --- .../GHSA-cqgj-h8vf-4w59.json | 28 +++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/advisories/github-reviewed/2026/06/GHSA-cqgj-h8vf-4w59/GHSA-cqgj-h8vf-4w59.json b/advisories/github-reviewed/2026/06/GHSA-cqgj-h8vf-4w59/GHSA-cqgj-h8vf-4w59.json index 046e7c2f41994..3e925b5152266 100644 --- a/advisories/github-reviewed/2026/06/GHSA-cqgj-h8vf-4w59/GHSA-cqgj-h8vf-4w59.json +++ b/advisories/github-reviewed/2026/06/GHSA-cqgj-h8vf-4w59/GHSA-cqgj-h8vf-4w59.json @@ -117,18 +117,46 @@ "type": "WEB", "url": "https://github.com/cometd/cometd/pull/2118" }, + { + "type": "WEB", + "url": "https://github.com/cometd/cometd/commit/1df70a2563fc53f2d8a280735c302bfae674c392" + }, { "type": "WEB", "url": "https://github.com/cometd/cometd/pull/2168" }, + { + "type": "WEB", + "url": "https://github.com/cometd/cometd/commit/08fa2f2690b6d60849a3473e2ac8dcc32c6cf19b" + }, { "type": "WEB", "url": "https://github.com/cometd/cometd/pull/2169" }, + { + "type": "WEB", + "url": "https://github.com/cometd/cometd/commit/f28d4fb4a04d996a8fda7e5e87c35f1790afbe83" + }, { "type": "PACKAGE", "url": "https://github.com/cometd/cometd" }, + { + "type": "WEB", + "url": "https://github.com/cometd/cometd/tree/5.0.23" + }, + { + "type": "WEB", + "url": "https://github.com/cometd/cometd/tree/6.0.19" + }, + { + "type": "WEB", + "url": "https://github.com/cometd/cometd/tree/7.0.19" + }, + { + "type": "WEB", + "url": "https://github.com/cometd/cometd/releases/tag/8.0.9" + }, { "type": "WEB", "url": "https://github.com/cometd/cometd/discussions/2116" From 299951199c627762dab3a259008d81fb09fa8c7d Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Wed, 8 Jul 2026 02:55:28 -0400 Subject: [PATCH 2/2] Add CometD NVD reference --- .../2026/06/GHSA-cqgj-h8vf-4w59/GHSA-cqgj-h8vf-4w59.json | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2026/06/GHSA-cqgj-h8vf-4w59/GHSA-cqgj-h8vf-4w59.json b/advisories/github-reviewed/2026/06/GHSA-cqgj-h8vf-4w59/GHSA-cqgj-h8vf-4w59.json index 3e925b5152266..8528803f23179 100644 --- a/advisories/github-reviewed/2026/06/GHSA-cqgj-h8vf-4w59/GHSA-cqgj-h8vf-4w59.json +++ b/advisories/github-reviewed/2026/06/GHSA-cqgj-h8vf-4w59/GHSA-cqgj-h8vf-4w59.json @@ -109,6 +109,10 @@ "type": "WEB", "url": "https://github.com/cometd/cometd/security/advisories/GHSA-cqgj-h8vf-4w59" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53114" + }, { "type": "WEB", "url": "https://github.com/cometd/cometd/issues/2117" @@ -169,6 +173,6 @@ "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2026-06-10T16:46:28Z", - "nvd_published_at": null + "nvd_published_at": "2026-06-18T17:16:27Z" } -} \ No newline at end of file +}