← All credits
Thanks [go7f0](https://hackerone.com/go7f0) for reporting this vulnerability through our HackerOne bug bounty program
15 vulnerability records and advisories credit this contributor.
CVE-2026-3035
Authentication Bypass Using an Alternate Path or Channel in GitLab
CVE-2026-3093
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-4332
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-8472
Missing Authorization in GitLab
CVE-2026-5309
Authorization Bypass Through User-Controlled Key in GitLab
CVE-2026-3553
Incorrect Authorization in GitLab
CVE-2026-8589
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-13874
Authorization Bypass Through User-Controlled Key in GitLab
CVE-2026-1338
Authorization Bypass Through User-Controlled Key in GitLab
CVE-2026-2973
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab