Introducing a Security Support Policy for the Kotlin Standard Library | The Kotlin Blog
Starting with Kotlin 2.4, the Kotlin standard library now includes an 18-month security support policy, with security fixes backported across active release lines.