Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: JetBrains Component: Goland Clear all filters
TI-2026-46332 CVE-2026-64803 · GHSA-7pxx-mh46-9ggr

Code injection in JetBrains GoLand

Priority LOW 35

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00211 Published 2026-07-23 Fixed in 2026.2 CWE-94
TI-2026-46331 CVE-2026-64802 · GHSA-qc93-vrfp-c4mv

Code injection in JetBrains GoLand

Priority LOW 35

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00211 Published 2026-07-23 Fixed in 2026.2 CWE-94
TI-2024-24589 CVE-2024-37051 · GHSA-vfg9-hgrq-rjhq

Insufficiently protected credentials in JetBrains IntelliJ IDEA

Priority HIGH 75

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4,…

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.04883 Published 2024-06-10 Fixed in 2023.1.7, 2023.2.7 +19 CWE-522
TI-2021-20971 CVE-2021-45977 · GHSA-pvh2-w6q4-6hqm

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional…

Priority MEDIUM 44

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CL…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01083 Published 2022-02-25 No fix listed