{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"kotlin","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NF10XGX71B00WD0N3RNG75","modified_at":"2026-10-05T04:00:05.176582680Z","published_at":"2021-02-03T16:15:13.727Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-29582","https://security-tracker.debian.org/tracker/CVE-2020-29582"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-29582","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-29582"}],"summary":"In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permiss"}