Description
In JetBrains Ktor before 3.6.1 hTTP request smuggling was possible in the CIO engine
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | Ktor | < 3.6.1 | 3.6.1 |
Medium · 4.8
CVE-2026-123318
EUVD-2026-118082GHSA-6mmc-8ffm-69rw
In JetBrains Ktor before 3.6.1 hTTP request smuggling was possible in the CIO engine
Published Nov 6, 2026 · Updated Nov 10, 2026 · Assigned by JetBrains