ai.koog:agents-core-jvm (>=0.1.0 <=0.2.1), ai.koog:agents-ext-jvm (>=0.1.0 <=0.2.1) +264 more potentially affected by CVE-2025-29904 via io.ktor:ktor-network-tls-jvm (>=3.0.0-beta-1 <=3.1.0)

io.ktor:ktor-network-tls-jvm MAVEN version =3.0.0-beta-1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2025-29904 Source advisory: SNYK:JAVA-IOKTOR-9460811...

at.asitplus.wallet:vck-openid-ktor (>=5.2.0 <=5.7.2), com.apadmi:mockzilla (>=2.1.0 <=2.1.2) +54 more potentially affected by CVE-2025-29904 via io.ktor:ktor-client-cio (>=3.0.0-beta-1 <=3.1.0)

io.ktor:ktor-client-cio MAVEN version =3.0.0-beta-1, =5.2.0, =2.1.0, =0.0.1, =0.11.0, =0.11.0, =0.1.5, =0.16.0, =0.17.1 - com.inkapplications.shade:auth =2.2.1 - com.inkapplications.shade:core =2.2.1 - com.inkapplications.shade:devices =2.2.1 - com.inkapplications.shade:discover =2.2.1 -...

ai.koog:agents-core-jvm (>=0.1.0 <=0.2.1), ai.koog:agents-ext-jvm (>=0.1.0 <=0.2.1) +242 more potentially affected by CVE-2025-29904 via io.ktor:ktor-client-cio-jvm (>=3.0.0-beta-1 <=3.1.0)

io.ktor:ktor-client-cio-jvm MAVEN version =3.0.0-beta-1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2025-29904 Source advisory: SNYK:JAVA-IOKTOR-9460810...

CVE-2025-29904

In JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible...