In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects. https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2022-24329