← All credits

Thanks [a_m_a_m](https://hackerone.com/a_m_a_m) for reporting this vulnerability through our HackerOne bug bounty program

2 vulnerability records and advisories credit this contributor.

CVE-2026-78252
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-2995
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab