← All credits

Thanks [st4nly0n](https://hackerone.com/st4nly0n) for reporting this vulnerability through our HackerOne bug bounty program

14 vulnerability records and advisories credit this contributor.

Improper Control of Generation of Code ('Code Injection') in GitLab

Incorrect Provision of Specified Functionality in GitLab

Improper Encoding or Escaping of Output in GitLab

Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands