WaratekVRT Sign in

Jetbrains CVEs

9 CVEs, 1 protected by Waratek

Reset
More filters (1)
Columns
Vendor jetbrains✕
Overview 9 matches · 1 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
9matches 1protected11.1% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 1 11.1% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 8 88.9%
Critical 1 11.1% High 2 22.2% Medium 6 66.7% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 11.1% partly blocked 0 0.0% not blocked 8 88.9% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 9 100.0%
split by peak 3 / year
No exploit published: 8Protected by Waratek: 1 Medium: 6High: 2Critical: 1 not blocked: 8blocked by ARMR today: 1 No public exploit: 9
20191 No exploit published1 Medium1 not blocked1 No public exploit1 20202 No exploit published2 High2 not blocked2 No public exploit2 20211 No exploit published1 Medium1 not blocked1 No public exploit1 20223 No exploit published3 Medium3 not blocked3 No public exploit3 20230 20241 No exploit published1 Medium1 not blocked1 No public exploit1 20250 20261 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1
20192020202120222023202420252026
9 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-53914 Critical 2026-06-26 Protected by Waratek No public exploit In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata
CVE-2024-49580 Medium 2024-10-17 No exploit published No public exploit In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure
CVE-2022-38180 Medium 2022-08-12 No exploit published No public exploit In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases
CVE-2022-38179 Medium 2022-08-12 No exploit published No public exploit JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack
CVE-2022-24329 Medium 2022-02-25 No exploit published No public exploit In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.
CVE-2020-29582 Medium 2021-02-03 No exploit published No public exploit In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.
CVE-2020-15824 High 2020-08-08 No exploit published No public exploit In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there is a script-cache privilege escalation vulnerability due to kotlin-main-kts cached scripts in the system temp directory, which is shared by all users by default.
CVE-2020-5207 High 2020-01-27 No exploit published No public exploit In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator.
CVE-2019-19703 Medium 2019-12-10 No exploit published No public exploit In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location.