CVE Catalog

CVE-2026-68762

MediumCVSS 5.9
Published: Updated: Translated: NVD NIST

Summary

In JetBrains Ktor before 3.4.1, a potential Denial of Service (DoS) attack via WebSocket decompression was possible.

Risk Assessment

An attacker could cause server overload, leading to application unavailability.

Recommendation

Update Ktor to version 3.4.1 or later to fix the vulnerability.

Original NVD description (English source)

In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible

Vulnerability data from NVD (NIST) · CISA KEV · EPSS