← All credits
Thanks [yvvdwf](https://hackerone.com/yvvdwf) for reporting this vulnerability through our HackerOne bug bounty program
51 vulnerability records and advisories credit this contributor.
CVE-2026-15216
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-15217
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2023-6159
Inefficient Regular Expression Complexity in GitLab
CVE-2025-9222
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-6896
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-10086
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-10087
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2024-3092
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2024-1451
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-7481
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab