← All credits
Thanks [3nvz](https://hackerone.com/3nvz) for reporting this vulnerability through our HackerOne bug bounty program
5 vulnerability records and advisories credit this contributor.
CVE-2026-15387
Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab
CVE-2026-16494
Missing Authorization in GitLab
CVE-2026-16627
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-6336
Incorrect Authorization in GitLab
CVE-2026-9694
Improper Neutralization of Substitution Characters in GitLab