CVE-2026-64803
Published Jul 23, 2026In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK
- evidence mentions
- 1
- Buzz score
- 11.9
Vendor/product archive
jetbrains / goland CVEs
Beta · best-effort8 CVEs tagged to jetbrains / goland — 2 Critical, 4 High, 1 Medium, 1 Low, 0 Unrated.
CVE-2026-64802
Published Jul 23, 2026In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-64800
Published Jul 23, 2026In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-53915
Published Jun 19, 2026In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2025-29932
Published Mar 25, 2025In JetBrains GoLand before 2025.1 an XXE during debugging was possible
CVE-2024-37051
Published Jun 10, 2024GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3;…
- evidence mentions
- 3
- Buzz score
- 20.4
CVE-2021-45977
Published Feb 25, 2022JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2…
CVE-2020-11685
Published Apr 22, 2020In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.
Showing 1-8 of 8 CVEsPage 1 of 1