Goland (Jetbrains) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 125 known versions, newest CVE from 2026-09-07. Vendor: Jetbrains.

CVEs of Goland

• CVE-2026-86506 - CVSS 5.9 (medium), 2026-09-07: In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data
• CVE-2026-64803 - CVSS 7.8 (high), 2026-07-23: In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK
• CVE-2026-64802 - CVSS 7.8 (high), 2026-07-23: In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration
• CVE-2026-64800 - CVSS 5.7 (medium), 2026-07-23: In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default
• CVE-2026-53915 - CVSS 8.8 (high), 2026-06-19: In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration
• CVE-2025-29932 - CVSS 5.3 (medium), 2025-03-25: In JetBrains GoLand before 2025.1 an XXE during debugging was possible
• CVE-2024-37051 - CVSS 9.3 (critical), 2024-06-10: GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7,…
• CVE-2021-45977 - CVSS 9.8 (critical), 2022-02-25: JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm…
• CVE-2020-11685 - CVSS 7.5 (high), 2020-04-22: In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.