🚨 CVE-2026-123317
In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies