This wiki page holds a list of security issues having to do with the OpenAjax Hub 2.0 Specification.
At this time, there are no issues.