KT
Product
Ktor
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 13Low 2
Watch
Add Ktor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-10102 | 8.1 | Jul 3 | JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially… Affected: before 1.1.0 |
| CVE-2022-48476 | 7.5 | Apr 24 | In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible Affected: before 2.3.0 |
| CVE-2021-43203 | 7.5 | Nov 9 | In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly Affected: before 1.6.4 |
| CVE-2020-5207 | 7.5 | Jan 27 | In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers… Affected: before 1.3.0 |
Showing 4
