JetBrains GoLand
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-118696 | | In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026 | HIGH 8.0 | 0.3 % | ||
| CVE-2026-86506 | < 2026.2.2.1 | In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-64803 | < 2026.2 | In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK | HIGH 7.8 | 0.2 % | ||
| CVE-2026-64802 | < 2026.2 | In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration | HIGH 7.8 | 0.2 % | ||
| CVE-2026-64800 | < 2026.2 | In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default | MEDIUM 5.7 | 0.8 % | ||
| CVE-2026-53915 | < 2026.1.3 | In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration | HIGH 8.8 | 0.5 % | ||
| CVE-2025-29932 | < 2025.1 | In JetBrains GoLand before 2025.1 an XXE during debugging was possible | MEDIUM 5.3 | 0.2 % | ||
| CVE-2024-37051 | | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023 | CRITICAL 9.3 | 4.9 % |