CVE-2022-25897

The CVE-2022-25897 issue affects the Eclipse Milo SDK-Server (org.eclipse.milo:sdk-server) prior to version 0.6.8. The root cause is a memory‑consumption bypass in CloseSession handling when deleteSubscription is False, allowing a denial of service via repeated CloseSession requests. The Red Hat ...

CVE-2026-61387

CVE-2026-61387 (Eclipse Milo) affects Milo 1.0.0–1.1.4. The issue is that monitored-item quota accounting is not exception-safe: if item creation fails due to an unchecked error, the server-global reservation is not restored. Additionally, deeply nested PubSub ExtensionObjects in a CreateMonitore...