← All credits
Thanks [aphantom](https://hackerone.com/aphantom) for reporting this vulnerability through our HackerOne bug bounty program
4 vulnerability records and advisories credit this contributor.
CVE-2026-7427
Allocation of Resources Without Limits or Throttling in GitLab
CVE-2026-3607
Access Control Check Implemented After Asset is Accessed in GitLab
CVE-2024-9183
Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
CVE-2026-0752
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab