OmniFaces: Forged combined-resource IDs and related output/push boundaries

{
                    "vendor": "omnifaces",
                    "product": "omnifaces",
                    "versions": [
                        {
                            "version": "< 1.14.3",
                            "status": "affected"
                        },
                        {
                            "version": ">= 2.0, < 2.7.33",
                            "status": "affected"
                        },
                        {
                            "version": ">= 3.0, < 3.14.23",
                            "status": "affected"
                        },
                        {
                            "version": ">= 4.0, < 4.7.12",
                            "status": "affected"
                        },
                        {
                            "version": ">= 5.0, < 5.4.2",
                            "status": "affected"
                        }
                    ]
                }