← All credits
Thanks [go7f0](https://hackerone.com/go7f0) for reporting this vulnerability through our HackerOne bug bounty program
16 vulnerability records and advisories credit this contributor.
CVE-2026-2973
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2026-1663
Missing Authorization in GitLab
CVE-2026-0602
Authentication Bypass Using an Alternate Path or Channel in GitLab
CVE-2025-14103
Missing Authorization in GitLab
CVE-2026-1080
Authorization Bypass Through User-Controlled Key in GitLab
CVE-2025-14592
Missing Authorization in GitLab