Advisories · Technology

JetBrains Ktor.

Every CVE that names JetBrains Ktor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-123319 CVE record

CVSS 3.7 Low

JetBrains Ktor: In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie…
- JetBrains Ktor
- CWE-565
Not analysed yet 6 Nov 2026
CVE-2026-123318 CVE record

CVSS 4.8 Medium

HTTP request smuggling in JetBrains Ktor
- JetBrains Ktor
- HTTP request smuggling
Not analysed yet 6 Nov 2026
CVE-2026-123317 CVE record

CVSS 8.1 High

In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies
- JetBrains Ktor
- CWE-354
Not analysed yet 6 Nov 2026
CVE-2026-68762 CVE record

CVSS 5.9 Medium

Infinite loop in JetBrains Ktor
- JetBrains Ktor
- Denial of service
Not analysed yet 17 Aug 2026
CVE-2025-29904 CVE record

CVSS 5.3 Medium

HTTP request smuggling in JetBrains Ktor
- JetBrains Ktor
- HTTP request smuggling
Not analysed yet 12 Mar 2025
CVE-2023-45613 CVE record

CVSS 6.8 Medium

Improper certificate validation in JetBrains Ktor
- JetBrains Ktor
- Weak cryptography or TLS
Not analysed yet 9 Oct 2023
CVE-2023-45612 CVE record

CVSS 8.6 High

XML external entity injection in JetBrains Ktor
- JetBrains Ktor
- XML external entities (XXE)
Not analysed yet 9 Oct 2023
CVE-2023-34339 CVE record

CVSS 3.3 Low

Sensitive information in error messages in JetBrains Ktor
- JetBrains Ktor
- Information disclosure
Not analysed yet 1 Jun 2023
CVE-2022-48476 CVE record

CVSS 7.5 High

Path traversal in JetBrains Ktor
- JetBrains Ktor
- Path traversal
Not analysed yet 24 Apr 2023
CVE-2022-29930 CVE record

CVSS 8.7 High

SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value.
- JetBrains Ktor
- CWE-342
Not analysed yet 12 May 2022
CVE-2022-29035 CVE record

CVSS 3.3 Low

Insufficiently random values in JetBrains Ktor
- JetBrains Ktor
- Weak cryptography or TLS
Not analysed yet 11 Apr 2022