CVE-2026-61387

CVE-2026-61387 affects Eclipse Milo versions 1.0.0–1.1.4. The vulnerability stems from non-exception-safe quota accounting for monitored items: if item creation fails with an unchecked error, the server-global reservation is not restored. Additionally, deeply nested PubSub ExtensionObjects in a C...