CINXE.COM

<!DOCTYPE html SYSTEM "about:legacy-compat"> <html lang="en-US" data-preset="contrast" data-primary-color="#307FFF"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta charset="UTF-8"><meta name="built-on" content="2024-11-18T21:26:17.285498885"><meta name="build-number" content="3272"><script> (function (w, d, s, l, i) { w[l] = w[l] || []; w[l].push({'gtm.start': new Date().getTime(), event: 'gtm.js'}); var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = '//www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f); })(window, document, 'script', 'dataLayer', 'GTM-5P98'); </script> <script src="static/v3/analytics.js"></script> <title>Security | Kotlin Documentation</title><script type="application/json" id="virtual-toc-data">[]</script><script type="application/json" id="topic-shortcuts"></script><link href="static/v3/app.css?v=6.11.0-footer" rel="stylesheet"><link rel="icon" type="image/svg" sizes="16x16" href="https://kotlinlang.org/assets/images/favicon.svg?v2"><link rel="icon" type="image/x-icon" sizes="32x32" href="https://kotlinlang.org/assets/images/favicon.ico?v2"><link rel="icon" type="image/png" sizes="96x96" href="https://kotlinlang.org/assets/images/apple-touch-icon.png?v2"><link rel="icon" type="image/png" sizes="300x300" href="https://kotlinlang.org/assets/images/apple-touch-icon-72x72.png?v2"><link rel="icon" type="image/png" sizes="500x500" href="https://kotlinlang.org/assets/images/apple-touch-icon-114x114.png?v2"><meta name="image" content="https://kotlinlang.org/assets/images/open-graph/docs.png"><meta property="og:title" content="Security | Kotlin"><meta property="og:description" content=""><meta property="og:image" content="https://kotlinlang.org/assets/images/open-graph/docs.png"><meta property="og:site_name" content="Kotlin Help"><meta property="og:type" content="website"><meta property="og:locale" content="en_US"><meta property="og:url" content="https://kotlinlang.org/docs/security.html"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:site" content="@kotlin"><meta name="twitter:title" content="Security | Kotlin"><meta name="twitter:description" content=""><meta name="twitter:creator" content="@kotlin"><meta name="twitter:image:src" content="https://kotlinlang.org/assets/images/open-graph/docs.png"><script type="application/ld+json">{ "@context": "http://schema.org", "@type": "WebPage", "@id": "https://kotlinlang.org/docs/security.html#webpage", "url": "https://kotlinlang.org/docs/security.html", "name": "Security | Kotlin", "description": "", "image": "https://kotlinlang.org/assets/images/open-graph/docs.png", "inLanguage":"en-US" }</script><script type="application/ld+json">{ "@type": "WebSite", "@id": "https://kotlinlang.org/docs/#website", "url": "https://kotlinlang.org/docs/", "name": "Kotlin Help" }</script><style>a[href="test-page.html"] { visibility: hidden; }</style></head><body data-id="security" data-main-title="Security" data-article-props="{"seeAlsoStyle":"links"}" data-template="article" data-breadcrumbs="Other resources" data-edit-url="https://github.com/JetBrains/kotlin-web-site/edit/master/docs/topics/security.md"><div class="wrapper"><main class="panel _main"><header class="panel__header"><div class="container"><h3>Kotlin Help</h3><div class="panel-trigger"></div></div></header><section class="panel__content"><div class="container"><article class="article" data-shortcut-switcher="inactive"><h1 data-toc="security" id="security.md">Security</h1><p id="o9zoyq_2">We do our best to make sure our products are free of security vulnerabilities. To reduce the risk of introducing a vulnerability, you can follow these best practices:</p><ul class="list _bullet" id="o9zoyq_3"><li class="list__item" id="o9zoyq_6"><p id="o9zoyq_8">Always use the latest Kotlin release. For security purposes, we sign our releases published on <a href="https://central.sonatype.com/search?q=g:org.jetbrains.kotlin" id="o9zoyq_10" data-external="true" rel="noopener noreferrer">Maven Central</a> with these PGP keys:</p><ul class="list _bullet" id="o9zoyq_9"><li class="list__item" id="o9zoyq_11"><p>Key ID: <span class="control" id="o9zoyq_14">kt-a@jetbrains.com</span></p></li><li class="list__item" id="o9zoyq_12"><p>Fingerprint: <span class="control" id="o9zoyq_15">2FBA 29D0 8D2E 25EE 84C1 32C3 0729 A0AF F899 9A87</span></p></li><li class="list__item" id="o9zoyq_13"><p>Key size: <span class="control" id="o9zoyq_16">RSA 3072</span></p></li></ul></li><li class="list__item" id="o9zoyq_7"><p id="o9zoyq_17">Use the latest versions of your application's dependencies. If you need to use a specific version of a dependency, periodically check if any new security vulnerabilities have been discovered. You can follow <a href="https://docs.github.com/en/code-security" id="o9zoyq_18" data-external="true" rel="noopener noreferrer">the guidelines from GitHub</a> or browse known vulnerabilities in the <a href="https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=kotlin" id="o9zoyq_19" data-external="true" rel="noopener noreferrer">CVE base</a>.</p></li></ul><p id="o9zoyq_4">We are very eager and grateful to hear about any security issues you find. To report vulnerabilities that you discover in Kotlin, please post a message directly to our <a href="https://youtrack.jetbrains.com/newIssue?project=KT&c=Type%20Security%20Problem" id="o9zoyq_20" data-external="true" rel="noopener noreferrer">issue tracker</a> or send us an <a href="mailto:security@jetbrains.org" id="o9zoyq_21" data-external="true">email</a>.</p><p id="o9zoyq_5">For more information on how our responsible disclosure process works, please check the <a href="https://www.jetbrains.com/legal/docs/terms/coordinated-disclosure/" id="o9zoyq_22" data-external="true" rel="noopener noreferrer">JetBrains Coordinated Disclosure Policy</a>.</p><div class="last-modified">Last modified: 23 April 2024</div><div data-feedback-placeholder="true"></div><div class="navigation-links _bottom"><a href="gsoc-2023.html" class="navigation-links__prev">Google Summer of Code with Kotlin 2023</a><a href="kotlin-pdf.html" class="navigation-links__next">Kotlin documentation as PDF</a></div></article><div id="disqus_thread"></div></div></section></main></div><script src="static/v3/app.js"></script></body></html>