GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Thanks [toofikz](https://hackerone.com/toofikz) for reporting this vulnerability through our HackerOne bug bounty program

2 vulnerability records and advisories credit this contributor.

CVE-2026-14351
Exposure of Sensitive Information Through Metadata in GitLab
CVE-2026-6335
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab