All stable versions of CometD are actively supported for security issues. End-of-life CometD versions may be supported for serious security issues, or with a commercial support from Webtide.
CometD development is sponsored by Webtide.
If you need a CometD expert to answer your questions, help you in development, design with you the clustering of your application, tune CometD for maximum performance, then Webtide’s team can help.
Do not open a public issue to report a security vulnerability.
Please report CometD security issues to security@webtide.com.