JetBrains Kotlin versions prior to 1.3.30 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack.
jetbrains kotlin