{"schema_version":1,"title":"Jetbrains Ktor vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 3 vulnerabilities in Jetbrains Ktor: 2 in the last 7 days and 3 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-123318, was published on 6 November 2026. 2 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/ktor","json_url":"https://junglewise.ai/threats/technologies/ktor.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/ktor","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":1,"all_time":3,"critical":0,"exploited":0,"last_7_days":2,"last_30_days":2,"last_90_days":3,"last_365_days":3},"latest":[{"cve":"CVE-2026-123318","cvss":4.8,"slug":"cve-2026-123318-in-jetbrains-ktor-before-3-6-1-http-request-smuggling-was","title":"JetBrains Ktor HTTP request smuggling in CIO engine","severity":"medium","exploited":false,"published_at":"2026-11-06T11:17:11.317+00:00","url":"https://junglewise.ai/threats/cve-2026-123318-in-jetbrains-ktor-before-3-6-1-http-request-smuggling-was"},{"cve":"CVE-2026-123317","cvss":8.1,"slug":"cve-2026-123317-in-jetbrains-ktor-before-3-6-1-session-forgery-was-possible-via","title":"JetBrains Ktor session forgery in encrypted cookies","severity":"high","exploited":false,"published_at":"2026-11-06T11:17:11.17+00:00","url":"https://junglewise.ai/threats/cve-2026-123317-in-jetbrains-ktor-before-3-6-1-session-forgery-was-possible-via"},{"cve":"CVE-2026-68762","cvss":5.9,"epss":0.0037,"slug":"cve-2026-68762-jetbrains-ktor-denial-of-service-in-websocket-decompression","title":"JetBrains Ktor denial of service in WebSocket decompression","severity":"medium","exploited":false,"published_at":"2026-08-17T16:17:30.237+00:00","url":"https://junglewise.ai/threats/cve-2026-68762-jetbrains-ktor-denial-of-service-in-websocket-decompression"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Jetbrains YouTrack","slug":"youtrack","vulnerabilities":83,"url":"https://junglewise.ai/threats/technologies/youtrack"},{"name":"Jetbrains IntelliJ IDEA","slug":"intellij-idea","vulnerabilities":51,"url":"https://junglewise.ai/threats/technologies/intellij-idea"},{"name":"Jetbrains TeamCity","slug":"teamcity","vulnerabilities":34,"url":"https://junglewise.ai/threats/technologies/teamcity"},{"name":"Jetbrains Datalore","slug":"datalore","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/datalore"},{"name":"Jetbrains Hub","slug":"hub","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/hub"},{"name":"Jetbrains Webstorm","slug":"webstorm","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/webstorm"},{"name":"Jetbrains GoLand","slug":"goland","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/goland"},{"name":"Jetbrains PyCharm","slug":"pycharm","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/pycharm"},{"name":"Jetbrains CLion","slug":"clion","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/clion"},{"name":"Jetbrains PhpStorm","slug":"phpstorm","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/phpstorm"},{"name":"Jetbrains Rider","slug":"rider","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/rider"},{"name":"Jetbrains Toolbox App","slug":"toolbox-app","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/toolbox-app"}],"technology":{"hub":true,"name":"Jetbrains Ktor","slug":"ktor","vendor":{"hub":true,"name":"Jetbrains","slug":"jetbrains","url":"https://junglewise.ai/threats/vendors/jetbrains"},"aliases":[],"category":"framework","description":"JetBrains framework for building asynchronous web applications and services in Kotlin.","url":"https://junglewise.ai/threats/technologies/ktor"},"most_severe":[{"cve":"CVE-2026-123317","cvss":8.1,"slug":"cve-2026-123317-in-jetbrains-ktor-before-3-6-1-session-forgery-was-possible-via","title":"JetBrains Ktor session forgery in encrypted cookies","severity":"high","exploited":false,"published_at":"2026-11-06T11:17:11.17+00:00","url":"https://junglewise.ai/threats/cve-2026-123317-in-jetbrains-ktor-before-3-6-1-session-forgery-was-possible-via"},{"cve":"CVE-2026-68762","cvss":5.9,"epss":0.0037,"slug":"cve-2026-68762-jetbrains-ktor-denial-of-service-in-websocket-decompression","title":"JetBrains Ktor denial of service in WebSocket decompression","severity":"medium","exploited":false,"published_at":"2026-08-17T16:17:30.237+00:00","url":"https://junglewise.ai/threats/cve-2026-68762-jetbrains-ktor-denial-of-service-in-websocket-decompression"},{"cve":"CVE-2026-123318","cvss":4.8,"slug":"cve-2026-123318-in-jetbrains-ktor-before-3-6-1-http-request-smuggling-was","title":"JetBrains Ktor HTTP request smuggling in CIO engine","severity":"medium","exploited":false,"published_at":"2026-11-06T11:17:11.317+00:00","url":"https://junglewise.ai/threats/cve-2026-123318-in-jetbrains-ktor-before-3-6-1-http-request-smuggling-was"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}