Goland
Vendor:
First CVE: Apr 22, 2020 · Active for 6 years
8
Total CVEs
More Total CVEs than 87% of tracked products
1.6
Avg CVEs / Year
Higher CVE frequency than 62% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 48% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Goland over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 22, 2020
6 years ago
Most Recent CVE
Jul 23, 2026
5 days ago
CVE Severity & Scoring
Goland8 CVEs
13%
13%
63%
13%
All CVEs353,240 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local2 (25.0%)
Network6 (75.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None4 (50.0%)
Unknown0 (0.0%)
Required4 (50.0%)
Privileges Required
Low1 (12.5%)
High0 (0.0%)
None7 (87.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-53915HIGH In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration | Jun 19, 2026 | 8.8 | 33 | NO | NO |
CVE-2026-64803HIGH In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK | Jul 23, 2026 | 7.8 | 31 | NO | NO |
CVE-2026-64802HIGH In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration | Jul 23, 2026 | 7.8 | 31 | NO | NO |
CVE-2021-45977CRITICAL JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 20 | Feb 25, 2022 | 9.8 | 30 | NO | NO |
CVE-2024-37051HIGH GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; A | Jun 10, 2024 | 7.5 | 27 | NO | NO |
In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default | Jul 23, 2026 | 3.5 | 21 | NO | NO |
CVE-2020-11685HIGH In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS. | Apr 22, 2020 | 7.5 | 19 | NO | NO |
CVE-2025-29932MEDIUM In JetBrains GoLand before 2025.1 an XXE during debugging was possible | Mar 25, 2025 | 5.3 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Goland
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2021.3.1 | 1 | 9.8 | 1.1% | 0 | 0 |