|
ELS
< Back

CVE-2026-53914

Updated on 26 Jun 2026

Severity

6.7 Medium severity

Details

CVSS score
6.7
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata

Details

Affected product:
Jackson , Kotlin , OkHttp , Spring , java , micronaut-core , okio , opentelemetry-java , pulsar , typesense-java
Affected packages:
pulsar-client-api @ 3.2.4 (+1170 more)