In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadataReferenceshttps://www.jetbrains.com/privacy-security/issues-fixed/
