CVE-2026-64803

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK...

PT-2026-63956

Name of the Vulnerable Software and Affected Versions JetBrains GoLand versions prior to 2026.2 Description Arbitrary code execution is possible within the Go Modules integration before the user grants project trust. Recommendations Update JetBrains GoLand to version 2026.2...

PT-2026-63957

Name of the Vulnerable Software and Affected Versions JetBrains GoLand versions prior to 2026.2 Description Arbitrary code execution is possible before granting project trust through the configured Go SDK. Recommendations Update JetBrains GoLand to version 2026.2...

The vulnerability of the integrated development environment for programming languages like GoLand arises from improper external control of file names or file paths, allowing an attacker to execute arbitrary code.

The vulnerability of the GoLand integrated development environment is related to incorrect external control of file names or file paths. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-53915

CVE-2026-53915 : In JetBrains GoLand prior to 2026.1.3, remote code execution is possible through untrusted project configuration. According to CVSS 3.1 data, the vulnerability has a base score of 7.1 (HIGH) with network attack vector, no privileges required, user interaction required, and both c...

CVE-2025-29932

In JetBrains GoLand before 2025.1 an XXE during debugging was possible...

Unspecified Vulnerability in JetBrains GoLand

JetBrains GoLand is a set of intelligent IDE Integrated Development Environment dedicated to Go language development from the Czech company JetBrains. A security vulnerability exists in JetBrains GoLand versions prior to 2019.3.2, which stems from the fact that the program uses the HTTP protocol...