Nixpkgs security tracker

Untriaged

Permalink CVE-2026-53914

6.7 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): High (H)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Changed (C)
Confidentiality (C): High (H)
Integrity (I): Low (L)
Availability (A): Low (L)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Changed (C)
Modified Integrity (MI): Low (L)
Modified Availability (MA): Low (L)

created 1 month, 1 week ago Activity log

Created suggestion 1 month, 1 week ago

In JetBrains Kotlin before 2.4.20 code execution was possible via …

In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Affected products

Kotlin

<2.4.20

Matching in nixpkgs

pkgs.kotlin

General purpose programming language

nixos-unstable 2.4.0
- nixpkgs-unstable 2.4.0
- nixos-unstable-small 2.4.0
nixos-26.05 2.3.21
- nixos-26.05-small 2.3.21
- nixpkgs-26.05-darwin 2.3.21

pkgs.kotlin-native

Modern programming language that makes developers happier

nixos-unstable 2.2.21
- nixpkgs-unstable 2.2.21
- nixos-unstable-small 2.2.21
nixos-26.05 2.2.21
- nixos-26.05-small 2.2.21
- nixpkgs-26.05-darwin 2.2.21

pkgs.kotlin-language-server

Kotlin language server

nixos-unstable 1.3.13
- nixpkgs-unstable 1.3.13
- nixos-unstable-small 1.3.13
nixos-26.05 1.3.13
- nixos-26.05-small 1.3.13
- nixpkgs-26.05-darwin 1.3.13

pkgs.kotlin-interactive-shell

Kotlin Language Interactive Shell

nixos-unstable 0.5.2
- nixpkgs-unstable 0.5.2
- nixos-unstable-small 0.5.2
nixos-26.05 0.5.2
- nixos-26.05-small 0.5.2
- nixpkgs-26.05-darwin 0.5.2

pkgs.tree-sitter-grammars.tree-sitter-kotlin

Tree-sitter grammar for kotlin

nixos-unstable 0.3.8
- nixpkgs-unstable 0.3.8
- nixos-unstable-small 0.3.8
nixos-26.05 0.3.8
- nixos-26.05-small 0.3.8
- nixpkgs-26.05-darwin 0.3.8

pkgs.vscode-extensions.mathiasfrohlich.kotlin

Kotlin language support for VS Code

nixos-unstable 1.7.1
- nixpkgs-unstable 1.7.1
- nixos-unstable-small 1.7.1
nixos-26.05 1.7.1
- nixos-26.05-small 1.7.1
- nixpkgs-26.05-darwin 1.7.1

pkgs.vimPlugins.nvim-treesitter-parsers.kotlin

Tree-sitter grammar for kotlin

nixos-unstable 0.0.0+rev=93bfeee
- nixpkgs-unstable 0.0.0+rev=93bfeee
- nixos-unstable-small 0.0.0+rev=93bfeee
nixos-26.05 0.0.0+rev=93bfeee
- nixos-26.05-small 0.0.0+rev=93bfeee
- nixpkgs-26.05-darwin 0.0.0+rev=93bfeee

pkgs.python312Packages.tree-sitter-grammars.tree-sitter-kotlin

None

pkgs.python313Packages.tree-sitter-grammars.tree-sitter-kotlin

Python bindings for tree-sitter-kotlin

nixos-unstable 0.3.8
- nixpkgs-unstable 0.3.8
- nixos-unstable-small 0.3.8
nixos-26.05 0.3.8
- nixos-26.05-small 0.3.8
- nixpkgs-26.05-darwin 0.3.8

pkgs.python314Packages.tree-sitter-grammars.tree-sitter-kotlin