CVE-2026-123319

Description

In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injection

Affected Platforms

Weakness Type

CWE-565

References

• https://www.jetbrains.com/privacy-security/issues-fixed/