Use of Cache Containing Sensitive Information SNYK-JAVA-IOKTOR-8230428

[github-actions]

Overview

io.ktor:ktor-client-core is a framework for quickly creating web applications in Kotlin with minimal effort.

Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information due to improper caching in the HttpCache plugin. An attacker can disclose sensitive response information by exploiting the misconfigured cache settings.

Remediation

Upgrade io.ktor:ktor-client-core to version 2.3.13, 3.0.0-rc-2 or higher.

References

• GitHub Commit
• GitHub Commit
• JetBrains Advisory