GO
Product
GoLand
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 3Low 0
Watch
Add GoLand to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-45977 | 9.8 | Feb 25 | JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine… Affected: 2021.3.1 |
| CVE-2026-53915 | 8.8 | Jun 19 | In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration Affected: before 2026.1.3 |
| CVE-2026-64803 | 7.8 | Jul 23 | In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK Affected: before 2026.2 |
| CVE-2026-64802 | 7.8 | Jul 23 | In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration Affected: before 2026.2 |
| CVE-2024-37051 | 7.5 | Jun 10 | GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3;… Affected: before 2023.1.6; 2023.2.0 before 2023.2.7; 2023.3.0 before 2023.3.7; 2024.1.0 before 2024.1.3 |
| CVE-2020-11685 | 7.5 | Apr 22 | In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS Affected: before 2019.3.2 |
| CVE-2026-86506 | 5.9 | Sep 7 | In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data Affected: before 2026.2.2.1 |
| CVE-2026-64800 | 5.7 | Jul 23 | In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default Affected: before 2026.2 |
| CVE-2025-29932 | 5.3 | Mar 25 | In JetBrains GoLand before 2025.1 an XXE during debugging was possible Affected: before 2025.1 |
Showing 9