{"action":"Upgrade kotlin to 1.3.31+ds1-3 or later.","affected":[{"fixed":"1.3.31+ds1-3","introduced":"0"}],"component":"kotlin","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.3.31+ds1-3"],"id":"tcs_01M5NF1147SN571C5DYN3HT326","modified_at":"2026-10-05T04:00:05.176582680Z","published_at":"2021-02-03T16:15:13.727Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-29582","https://security-tracker.debian.org/tracker/CVE-2020-29582"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-29582#Debian:14/kotlin","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-29582"}],"summary":"In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permiss"}