Kotlin

kotlin

Vendor: Jetbrains • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-53914 1Jetbrains 1Kotlin Jun 27, 2026 Jun 26, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata
CVE-2022-24329 2Jetbrains Oracle 3Communications Cloud Native Core Binding Support Function Communications Pricing Design CenterKotlin Jun 17, 2026 Feb 25, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.
CVE-2020-29582 2Jetbrains Oracle 4Communications Cloud Native Core Network Slice Selection Function Communications Cloud Native Core PolicyCommunications Cloud Native Core Service Communication Proxy+1 more Jun 17, 2026 Feb 3, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.
CVE-2020-15824 2Jetbrains Oracle 3Banking Extensibility Workbench Communications Cloud Native Core PolicyKotlin Jun 17, 2026 Aug 8, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there is a script-cache privilege escalation vulnerability due to kotlin-main-kts cached scripts in the sy...Show more In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there is a script-cache privilege escalation vulnerability due to kotlin-main-kts cached scripts in the system temp directory, which is shared by all users by default.Show less
CVE-2019-10103 1Jetbrains 1Kotlin Jun 17, 2026 Jul 3, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in...Show more JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, is similar to CVE-2019-10101.Show less
CVE-2019-10102 1Jetbrains 2Kotlin Ktor Jun 17, 2026 Jul 3, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed...Show more JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30.Show less
CVE-2019-10101 1Jetbrains 1Kotlin Jun 17, 2026 Jul 3, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 JetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack.