CVE-2022-24329: JetBrains Kotlin

Medium severity, CVSS 5.3. EPSS: 2.2% chance of exploitation in the next 30 days.

In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects.

Affected products

• JetBrains Kotlin: before 1.6.0 (fixed in 1.6.0)
• Oracle Communications Cloud Native Core Binding Support Function: version 22.1.3 only
• Oracle Communications Pricing Design Center: version 12.0.0.4 only; version 12.0.0.5 only

Published 2022-02-25. Last modified 2026-06-17.