← All credits
Thanks [rogerace](https://hackerone.com/rogerace) for reporting this vulnerability through our HackerOne bug bounty program
12 vulnerability records and advisories credit this contributor.
CVE-2026-7487
Access Control Check Implemented After Asset is Accessed in GitLab
CVE-2026-6821
Missing Authorization in GitLab
CVE-2026-4672
Missing Authorization in GitLab
CVE-2026-11827
Insufficiently Protected Credentials in GitLab
CVE-2026-6269
Incorrect Authorization in GitLab
CVE-2026-5296
Missing Authorization in GitLab
CVE-2025-7691
Privilege Defined With Unsafe Actions in GitLab
CVE-2025-3950
Exposure of Private Personal Information to an Unauthorized Actor in GitLab
CVE-2025-6945
Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
CVE-2025-2498
Insufficient Granularity of Access Control in GitLab