CVE-2019-10102: JetBrains Kotlin

High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days.

JetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30.

Affected products

• JetBrains Kotlin: before 1.3.30 (fixed in 1.3.30)
• JetBrains Ktor: before 1.1.0 (fixed in 1.1.0)

Published 2019-07-03. Last modified 2026-06-17.