Kotlin (Jetbrains) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 1907 known versions, newest CVE from 2026-06-26. Vendor: Jetbrains.

CVEs of Kotlin

• CVE-2026-53914 - CVSS 9.8 (critical), 2026-06-26: In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata
• CVE-2022-24329 - CVSS 5.3 (medium), 2022-02-25: In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.
• CVE-2020-29582 - CVSS 5.3 (medium), 2021-02-03: In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files…
• CVE-2020-15824 - CVSS 8.8 (high), 2020-08-08: In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there is a script-cache privilege escalation…
• CVE-2019-10102 - CVSS 8.1 (high), 2019-07-03: JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build…
• CVE-2019-10101 - CVSS 8.1 (high), 2019-07-03: JetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack.
• CVE-2019-10103 - CVSS 8.1 (high), 2019-07-03: JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http connection,…