Описание
JetBrains Kotlin: Unsafe Deserialization in Kotlin Build Cache Enables Code Execution
In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata
Пакеты
Наименование
org.jetbrains.kotlin:kotlin-gradle-plugin
maven
Затронутые версииВерсия исправления
< 2.4.20-Beta1
2.4.20-Beta1
Связанные уязвимости
CVSS3: 9.8
nvd
5 месяцев назад
In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata
CVSS3: 9.8
altlinux
4 месяца назад
ALT-PU-2026-10271: package `kotlin` update to version 2.4.20-alt0.5031