🚨 CVE-2026-123319
In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injection