CVE-2022-29035: JetBrains Ktor

Low severity, CVSS 2.7. EPSS: 0.6% chance of exploitation in the next 30 days.

In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations

Affected products

• JetBrains Ktor: before 2.0.0 (fixed in 2.0.0)

Published 2022-04-11. Last modified 2026-06-17.