← All credits

Thanks [rogerace](https://hackerone.com/rogerace) for reporting this vulnerability through our HackerOne bug bounty program

12 vulnerability records and advisories credit this contributor.

CVE-2025-4976
Exposure of Sensitive Information Due to Incompatible Policies in GitLab
CVE-2025-2408
Insufficient Granularity of Access Control in GitLab