CVE-2020-26129

In JetBrains Ktor before 1.4.1, HTTP request smuggling was possible...

CVE-2019-19389

JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...

CVE-2019-19703

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...

CVE-2019-10102

JetBrains Ktor framework created using the Kotlin IDE template versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30...

CVE-2019-12737

UserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a Predictable Salt for storing user credentials...

CVE-2019-12736

JetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for the LDAP protocol, leading to command injection...

JetBrains Ktor Installed (Windows)

Binary data jetbrainsktorwininstalled.nbin...

JetBrains Ktor Installed (MacOSX)

Binary data jetbrainsktormacosinstalled.nbin...

Unspecified Vulnerability in JetBrains Ktor

JetBrains Ktor is a web framework for building asynchronous servers and clients in Kotlin from the Czech company JetBrains. Used to create microservices, Web applications , etc., build RESTful API. JetBrains Ktor suffers from a security vulnerability that stems from the occurrence of an HTTP...

CVE-2025-29904

In JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible...

HTTP Request Smuggling

Overview io.ktor:ktor-client-cio is a framework for quickly creating web applications in Kotlin with minimal effort. Affected versions of this package are vulnerable to HTTP Request Smuggling due to a race condition between multiple coroutines using the same thread. Remediation Upgrade...

at.asitplus.wallet:vck-openid-ktor (>=5.2.0 <=5.7.2), com.apadmi:mockzilla (>=2.1.0 <=2.1.2) +83 more potentially affected by CVE-2025-29904 via io.ktor:ktor-network-tls (>=3.0.0-beta-1 <=3.1.0)

io.ktor:ktor-network-tls MAVEN version =3.0.0-beta-1, =5.2.0, =2.1.0, =0.0.1, =0.11.0, =0.11.0, =0.1.5, =0.16.0, =0.17.1 - com.inkapplications.shade:auth =2.2.1 - com.inkapplications.shade:core =2.2.1 - com.inkapplications.shade:devices =2.2.1 - com.inkapplications.shade:discover =2.2.1 and more...

HTTP Request Smuggling

Overview io.ktor:ktor-network-tls is a framework for quickly creating web applications in Kotlin with minimal effort. Affected versions of this package are vulnerable to HTTP Request Smuggling due to a race condition between multiple coroutines using the same thread. Remediation Upgrade...

at.asitplus.wallet:vck-openid-ktor (>=5.2.0 <=5.7.2), com.apadmi:mockzilla (>=2.1.0 <=2.1.2) +54 more potentially affected by CVE-2025-29904 via io.ktor:ktor-client-cio (>=3.0.0-beta-1 <=3.1.0)

io.ktor:ktor-client-cio MAVEN version =3.0.0-beta-1, =5.2.0, =2.1.0, =0.0.1, =0.11.0, =0.11.0, =0.1.5, =0.16.0, =0.17.1 - com.inkapplications.shade:auth =2.2.1 - com.inkapplications.shade:core =2.2.1 - com.inkapplications.shade:devices =2.2.1 - com.inkapplications.shade:discover =2.2.1 -...

ai.koog:agents-core-jvm (>=0.1.0 <=0.2.1), ai.koog:agents-ext-jvm (>=0.1.0 <=0.2.1) +242 more potentially affected by CVE-2025-29904 via io.ktor:ktor-client-cio-jvm (>=3.0.0-beta-1 <=3.1.0)

io.ktor:ktor-client-cio-jvm MAVEN version =3.0.0-beta-1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2025-29904 Source advisory: SNYK:JAVA-IOKTOR-9460810...

HTTP Request Smuggling

Overview io.ktor:ktor-client-cio-jvm is a framework for quickly creating web applications in Kotlin with minimal effort. Affected versions of this package are vulnerable to HTTP Request Smuggling due to a race condition between multiple coroutines using the same thread. Remediation Upgrade...

ai.koog:agents-core-jvm (>=0.1.0 <=0.2.1), ai.koog:agents-ext-jvm (>=0.1.0 <=0.2.1) +264 more potentially affected by CVE-2025-29904 via io.ktor:ktor-network-tls-jvm (>=3.0.0-beta-1 <=3.1.0)

io.ktor:ktor-network-tls-jvm MAVEN version =3.0.0-beta-1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2025-29904 Source advisory: SNYK:JAVA-IOKTOR-9460811...

HTTP Request Smuggling

Overview io.ktor:ktor-network-tls-jvm is a framework for quickly creating web applications in Kotlin with minimal effort. Affected versions of this package are vulnerable to HTTP Request Smuggling due to a race condition between multiple coroutines using the same thread. Remediation Upgrade...

CVE-2025-29904

In JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible...

CVE-2025-29904

In JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible...