JetBrains GoLand

• CVE-2026-118697 Critical 9.0 In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA, PyCharm, PhpStorm, RubyMine, WebStorm, GoLand and Rider before 2026.3 and 2026.2.4; CLion before 2026.3 and 2026.2.4.1; DataGrip before 0.3%
• CVE-2026-118696 High 8.0 In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.5.2; Rider before 2026. 0.3%
• CVE-2026-86506 Medium 5.9 In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data 0.4%
• CVE-2026-64803 High 7.8 In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK 0.2%
• CVE-2026-64802 High 7.8 In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration 0.2%
• CVE-2026-64800 Low 3.5 In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default 0.8%
• CVE-2026-53915 High 7.1 In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration 0.5%
• CVE-2025-29932 Medium 4.1 In JetBrains GoLand before 2025.1 an XXE during debugging was possible 0.2%
• CVE-2024-37051 Critical 9.3 GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 4.9%