Where
-Infinity
0
EOL
Nov 27, 2024

End of life: 11/27/2024, Latest version: 2.0.21

First published (updated )
EOL
Nov 27, 2024

End of life: 11/27/2024, Latest version: 2.0.21

First published (updated )
EOL
May 21, 2024

End of life: 5/21/2024, Latest version: 1.9.25

First published (updated )
EOL
May 21, 2024

End of life: 5/21/2024, Latest version: 1.9.25

First published (updated )
EOL
Jul 6, 2023

End of life: 7/6/2023, Latest version: 1.8.22

First published (updated )
EOL
Jul 6, 2023

End of life: 7/6/2023, Latest version: 1.8.22

First published (updated )
EOL
Dec 28, 2022

End of life: 12/28/2022, Latest version: 1.7.22

First published (updated )
EOL
Dec 28, 2022

End of life: 12/28/2022, Latest version: 1.7.22

First published (updated )
Severity
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.

First published (updated )
EOL
Jun 9, 2022

End of life: 6/9/2022, Latest version: 1.6.21

First published (updated )
EOL
Jun 9, 2022

End of life: 6/9/2022, Latest version: 1.6.21

First published (updated )
EOL
Nov 29, 2021

End of life: 11/29/2021, Latest version: 1.5.32

First published (updated )
EOL
Nov 29, 2021

End of life: 11/29/2021, Latest version: 1.5.32

First published (updated )
EOL
Apr 26, 2021

End of life: 4/26/2021, Latest version: 1.4.32

First published (updated )
EOL
Apr 26, 2021

End of life: 4/26/2021, Latest version: 1.4.32

First published (updated )
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there is a script-cache privilege escalation vulnerability due to kotlin-main-kts cached scripts in the system temp directory, which is shared by all users by default.

First published (updated )
Severity
8.1
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30.

First published (updated )
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

JetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack.

First published (updated )
Severity
8.1
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, is similar to CVE-2019-10101.

First published (updated )
EOL
Aug 14, 2020

End of life: 8/14/2020, Latest version: 1.3.72

First published (updated )
EOL
Aug 14, 2020

End of life: 8/14/2020, Latest version: 1.3.72

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203