Dead simple pub-sub using node.js / socket.io. Extremely easy to get started, scale, and use. It hooks into any back-end you have, and works on any browser your visitors are using. That means you don't have to worry about refactoring your existing codebase to take advantage of pub-sub push using web sockets.
There are no reported vulnerabilities