KT
Product
Ktor
by JetBrains · last CVE Aug 17, 2026
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 13Low 2
Watch

Add Ktor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-10102
8.1
1%
Jul 3
JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially…
Affected: before 1.1.0
CVE-2022-48476
7.5
1%
Apr 24
In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible
Affected: before 2.3.0
CVE-2021-43203
7.5
1%
Nov 9
In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly
Affected: before 1.6.4
CVE-2020-5207
7.5
1%
Jan 27
In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers…
Affected: before 1.3.0
Showing 4