JetBrains Kotlin: Unsafe Deserialization in Kotlin Build Cache Enables Code Execution
In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata
Advisories for Maven/Org.jetbrains.kotlin/Kotlin-Gradle-Plugin package
2026