{
  "product": "GoLand (EAP)",
  "url": "https://patchblox.com/security/product/windows-app/goland-eap",
  "summary": "The latest version of GoLand (EAP) is 263.7307.43, released October 23, 2026. Patch Radar has 0 security fixes for GoLand (EAP), closing 0 CVEs. 10 CVEs have no fix yet.",
  "platform": "windows-app",
  "vendor": "JetBrains",
  "supported": true,
  "latestVersion": "263.7307.43",
  "latestReleased": "2026-10-23T00:00:00Z",
  "fixCount": 0,
  "cveCount": 0,
  "exploitedCveCount": 0,
  "unfixedCveCount": 10,
  "fixes": [],
  "noFixYet": [
    {
      "cveId": "CVE-2026-118697",
      "url": "https://patchblox.com/security/cve/CVE-2026-118697",
      "title": "WebStorm and 11 others: Improper Certificate Validation",
      "priority": "Urgent",
      "status": "no-fix",
      "affectedVersion": "263.7307.43"
    },
    {
      "cveId": "CVE-2020-11685",
      "url": "https://patchblox.com/security/cve/CVE-2020-11685",
      "title": "GoLand: In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.43"
    },
    {
      "cveId": "CVE-2024-37051",
      "url": "https://patchblox.com/security/cve/CVE-2024-37051",
      "title": "WebStorm and 12 others: Insufficiently Protected Credentials",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.43"
    },
    {
      "cveId": "CVE-2026-118696",
      "url": "https://patchblox.com/security/cve/CVE-2026-118696",
      "title": "WebStorm and 12 others: Improper Check for Certificate Revocation",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.43"
    },
    {
      "cveId": "CVE-2026-53915",
      "url": "https://patchblox.com/security/cve/CVE-2026-53915",
      "title": "GoLand: In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.43"
    },
    {
      "cveId": "CVE-2026-64802",
      "url": "https://patchblox.com/security/cve/CVE-2026-64802",
      "title": "GoLand: In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust\u2026",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.43"
    },
    {
      "cveId": "CVE-2026-64803",
      "url": "https://patchblox.com/security/cve/CVE-2026-64803",
      "title": "GoLand: In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust\u2026",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "263.7307.43"
    },
    {
      "cveId": "CVE-2025-29932",
      "url": "https://patchblox.com/security/cve/CVE-2025-29932",
      "title": "GoLand: In JetBrains GoLand before 2025.1 an XXE during debugging was possible",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "263.7307.43"
    },
    {
      "cveId": "CVE-2026-64800",
      "url": "https://patchblox.com/security/cve/CVE-2026-64800",
      "title": "GoLand: In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "263.7307.43"
    },
    {
      "cveId": "CVE-2026-86506",
      "url": "https://patchblox.com/security/cve/CVE-2026-86506",
      "title": "GoLand: In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler\u0027s injected pprof\u2026",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "263.7307.43"
    }
  ],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}