← All credits
Thanks [joaxcar](https://hackerone.com/joaxcar) for reporting this vulnerability through our HackerOne bug bounty program
107 vulnerability records and advisories credit this contributor.
CVE-2024-2829
Inefficient Regular Expression Complexity in GitLab
CVE-2023-5995
Incorrect Authorization in GitLab
CVE-2023-3210
Inefficient Regular Expression Complexity in GitLab
CVE-2023-3205
Inefficient Regular Expression Complexity in GitLab
CVE-2023-1401
Insertion of Sensitive Information Into Sent Data in GitLab
CVE-2023-0632
Inefficient Regular Expression Complexity in GitLab
CVE-2022-4343
Exposure of Sensitive Information to an Unauthorized Actor in GitLab
CVE-2025-9958
Insertion of Sensitive Information Into Sent Data in GitLab
CVE-2025-9642
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
CVE-2025-6186
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab