Kotlin Help
Security
We do our best to make sure our products are free of security vulnerabilities. To reduce the risk of introducing a vulnerability, you can follow these best practices:
Always use the latest Kotlin release. For security purposes, we sign our releases published onMaven Central with these PGP keys:
Key ID:kt-a@jetbrains.com
Fingerprint:2FBA 29D0 8D2E 25EE 84C1 32C3 0729 A0AF F899 9A87
Key size:RSA 3072
Use the latest versions of your application's dependencies. If you need to use a specific version of a dependency, periodically check if any new security vulnerabilities have been discovered. You can followthe guidelines from GitHub or browse known vulnerabilities in theCVE base.
We are very eager and grateful to hear about any security issues you find. To report vulnerabilities that you discover in Kotlin, please post a message directly to ourissue tracker or send us anemail.
For more information on how our responsible disclosure process works, please check theJetBrains Coordinated Disclosure Policy.