Known vulnerabilities in Ktor

Software: Ktor
Software CPE: cpe:2.3:a:jetbrains_s.r.o.:kotlin_ktor:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ktor Ktor is affected by 10 known vulnerabilities: 1 high, 9 medium Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143877 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-68762
CWE-835 Medium
No
No
3.4.1 17.08.2026 SB20260817111
#VU143887 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-29904
CWE-444 Medium
No
No
3.1.1 12.03.2025 SB2025031286
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025
CWE-200 Medium
No
No
2.3.12 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU66501 - Incomplete List of Disallowed Inputs
CVE-2022-38179
CWE-184 Medium
No
No
2.1.0 15.08.2022 SB2022081535
#VU66500 - Improper Authentication
CVE-2022-38180
CWE-287 Medium
No
No
2.1.0 15.08.2022 SB2022081535
#VU58000 - Improper Authentication
CVE-2021-43203
CWE-287 Medium
No
No
1.6.4 08.11.2021 SB2021110815
#VU24896 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-19703
CWE-601 Medium
No
No
1.2.6 04.02.2020 SB2019122605
#VU24895 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-19389
CWE-113 Medium
No
No
1.2.6 04.02.2020 SB2019122605
#VU24831 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-5207
CWE-444 Medium
No
No
1.3.0 03.02.2020 SB2020020304
#VU22508 - Improper input validation
CVE-2019-12736
CWE-20 High
No
No
1.2.0 rc, 1.2.0 05.11.2019 SB2019110415