kotlin-stdlib-common Vulnerabilities

[malenalbc]

Run Dependency Check plugin on my Android library which uses version 1.2.0 of this library.
The plugin provides a report of vulnerabilities based on the National Vulnerability Database (NVD) hosted by NIST. It listed three on the specific version of kotlin-stdlib-common this library uses that were over 8 on the CVSS score level.

kotlin-stdlib-common-1.2.60.jar (pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.2.60, cpe:2.3:a:jetbrains:kotlin:1.2.60:*:*:*:*:*:*:*) : CVE-2019-10101, CVE-2019-10102, CVE-2019-10103

• CVE-2019-10101
• CVE-2019-10102
• CVE-2019-10103

All should be resolved just updating to latest version 1.4.20-M1

As a workaround I'm forcing the library to use the latest version:

dependencies {
 configurations.all {
        resolutionStrategy {
            force 'org.jetbrains.kotlin:kotlin-stdlib-common:1.4.20-M1'
        }
    }
 ...
}