{"uuid": "e1b74d6d-6c0d-45fa-9815-dc7ea0a0c661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55875", "type": "seen", "source": "https://t.me/pphm_HackerNews/106", "content": "CVE-2024-55875 Kotlin Programming Language\n\nhttp4k, a functional toolkit for Kotlin HTTP applications, is vulnerable to potential XML External Entity Injection (XXE) and Server-Side Request Forgery (SSRF) exploitation techniques in versions prior to 5.41.0.0. When handling malicious XML within incoming requests, http4k could enable threat actors to read locally stored sensitive information on the server and, in certain scenarios, execute remote code.", "creation_timestamp": "2026-07-20T22:00:04.879387Z"}