Advisories · Technology
JetBrains GoLand.
Every CVE that names JetBrains GoLand among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.0 CriticalCritical · CVSS 9+
Improper certificate validation in JetBrains Toolbox App and others
- JetBrains Toolbox App
- JetBrains IntelliJ IDEA
- Weak cryptography or TLS
- CVSS 8.0 High
JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3…
- JetBrains IntelliJ IDEA
- JetBrains PyCharm
- CWE-299
- CVSS 5.9 Medium
Missing authentication in JetBrains GoLand
- JetBrains GoLand
- Authentication bypass
- CVSS 7.8 High
Code injection in JetBrains GoLand
- JetBrains GoLand
- Code injection
- CVSS 7.8 High
Code injection in JetBrains GoLand
- JetBrains GoLand
- Code injection
- CVSS 3.5 Low
Sensitive information in log files in JetBrains GoLand
- JetBrains GoLand
- Information disclosure
- CVSS 7.1 High
External control of a file path in JetBrains GoLand
- JetBrains GoLand
- Path traversal
- CVSS 4.1 Medium
XML external entity injection in JetBrains GoLand
- JetBrains GoLand
- XML external entities (XXE)
- CVSS 9.3 CriticalCritical · CVSS 9+
Insufficiently protected credentials in JetBrains IntelliJ IDEA and others
- JetBrains IntelliJ IDEA
- JetBrains Aqua
- Hard-coded credentials