← All credits
Thanks [pwnie](https://hackerone.com/pwnie) for reporting this vulnerability through our HackerOne bug bounty program
34 vulnerability records and advisories credit this contributor.
CVE-2025-3111
Allocation of Resources Without Limits or Throttling in GitLab
CVE-2025-2853
Allocation of Resources Without Limits or Throttling in GitLab
CVE-2025-0993
Allocation of Resources Without Limits or Throttling in GitLab
CVE-2025-1110
Insufficient Granularity of Access Control in GitLab
CVE-2025-1677
Allocation of Resources Without Limits or Throttling in GitLab
CVE-2025-1257
Allocation of Resources Without Limits or Throttling in GitLab
CVE-2024-8266
Execution with Unnecessary Privileges in GitLab
CVE-2024-7102
Execution with Unnecessary Privileges in GitLab
CVE-2024-12431
Missing Authorization in GitLab
CVE-2023-2825
An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least