GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Thanks [a0xnirudh](https://hackerone.com/a0xnirudh) for reporting this vulnerability through our HackerOne bug bounty program

2 vulnerability records and advisories credit this contributor.

CVE-2026-12436
Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab
CVE-2026-2745
Authentication Bypass Using an Alternate Path or Channel in GitLab