← All credits
Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program
99 vulnerability records and advisories credit this contributor.
CVE-2023-5207
Execution with Unnecessary Privileges in GitLab
CVE-2023-3914
Incorrect User Management in GitLab
CVE-2025-13761
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-10712
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2023-6477
Incorrect Privilege Assignment in GitLab
CVE-2026-6073
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2023-3915
Incorrect Execution-Assigned Permissions in GitLab
CVE-2023-3950
Cleartext Storage of Sensitive Information in GitLab
CVE-2023-5009
Incorrect Authorization in GitLab
CVE-2023-6736
Inefficient Regular Expression Complexity in GitLab