← All credits
Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program
103 vulnerability records and advisories credit this contributor.
CVE-2023-3915
Incorrect Execution-Assigned Permissions in GitLab
CVE-2023-3950
Cleartext Storage of Sensitive Information in GitLab
CVE-2023-5009
Incorrect Authorization in GitLab
CVE-2023-6736
Inefficient Regular Expression Complexity in GitLab
CVE-2026-5816
Improper Resolution of Path Equivalence in GitLab
CVE-2026-5262
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-3254
Improper Restriction of Rendered UI Layers or Frames in GitLab
CVE-2025-13929
Allocation of Resources Without Limits or Throttling in GitLab
CVE-2025-4700
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-4439
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab